The problem is that you can't reasonably estimate what it costs/takes to achieve some very-lofty goal.

The goals are simply too pie-in-the-sky. Set some very simple goal like getting an app with xmpp working first. Then do another campaign to add some security features. And so on.