As I need to push events/data (collaborative app) I'll need websockets unless I decide to do some insane polling.

Totally with you on the security expert, definitely a priority.

Thanks a lot for taking the time to reply, you've been really helpful!