Honestly, at an early stage startup, especially if your target audience isn't developers, it's pretty safe to only do checks on the front end. Just add them later, once you have enough volume that it's a problem.

No, they are just helpers to show nicer messages to users. The post goes into exactly the topic of validating this stuff on the backend.