It's too risky to not launch before doing this.

It's far more likely that no one will even notice your site, rather than spammers start piling on. Implement basic logging & monitoring and you'll be fine. It may suck when/if it comes, but scaling & abuse defense is usually a good problem to have. Worst case, you've got a completely idle server!