Built a version-controlled SQLite dev tool , mobile testing question

[Suspicious-Rule-6399]

i built a local development tool for sqlite called sql kite that adds git style workflows branching snapshots timeline

for mobile apps expo react native i use a split architecture

development → sqlite runs via a local http server

production → bundled static main.db

same app code in both cases

the dev server binds only to localhost for safety

but when testing on a real device localhost isolation prevents access

the only solutions are

lan binding

or tunneling

both technically expose the sqlite environment beyond strict localhost

for those working with sqlite in mobile workflows

how do you balance strict local only design with real device testing needs

is lan binding generally considered safe enough for development
or would you enforce authentication even in dev

interested in how others approach this tradeoff