Is it too crazy an idea, finding customers without ads?

Some background my target market is pretty niche, and consists of privacy and security conscious individuals, so even if I bought ads, chances are they have a slew of ad blockers, and I won't reach them. So while I am not 100% opposed to ads and will likely test it in future, I also want to see how far I can go avoiding it.

Here's what I have planned, but I would love to get more ideas!

My first step would be to get feedback from privacy and security subreddits. I believe that there is a growing interest in the ways that we are storing our data, and I am hoping to find my first dozen customers.

I will spend some time tweaking my website and product based on the feedback, and my next step would be to post to Product Hunt. On PH, I will still be looking to understand my customers, but hopefully with a more empirical approach. I am also aware that I might not get the kind of numbers to support such an approach, but at the very least I hope to understand what doesn't work.

My next step would be to reach out security researchers and privacy advocates, who already have a following. I am working out what the pitch is, but the idea is not to hard sell the product but the broader goal. The unique aspects of what I am doing is that I can keep my customers' data secure, and their identity anonymous, even while providing them with a subscription based service. In a way, my product is more of a proof-of-concept of the broader idea and techniques that we can safeguard customers' data and privacy while making money in a regular commercial setup.

You can read about some of the steps I am taking on privacy on my (very new) blog here:
https://blog.mailyard.io/mailyard-goes-the-extra-mile-for-privacy/

With the experts, I will see on a case-by-case basis, what sort of collaboration can be done, but I do hope to get the word out in the right way.

My last idea (for now, heh) is to attend cybersecurity meetups in my local area, and subsequently around the world, and to talk to experts in the field. I am somewhat new to the world of cybersecurity and privacy, so I am looking to expand my network, but I will also be scouting for speaking gigs, or exhibition opportunities (though I am on a shoestring budget).

What do you guys think?