I'm fairly sure Voyager is a fully client-side app that can use the API from any instance directly no matter where it's hosted. Someone correct me if I'm wrong
The devs themselves said they need to proxy information including password through their servers due to how cors works. But people are saying that this may be resolved somehow, so idk.