Don't I have to rely on the OG frontend/GUI components, though? They are one automatic update away from bundling taking custom server address away with important security fixes, in a way that you are damned if you do and damned if you don't.

Technically yes but the frontend is so far open source so forking that is also something that could technically happen if company ever went back on it.