Doing it for regular people is one thing but when you say “managed” I assume you mean for businesses? That seems risky but I really don’t know much about it. Companies have more litigation money/resources than every-day folks and may be more apt to try and hold you liable for any security breaches, whether they were your fault or not. At least, that would be my fear.