Only the first use would need remote access. Assuming that the user just downloaded from the app store, that should be fairly safe assumption.

After the initial connection is made and the trial started, the trial end date can be verified via remote connection but fallback to internal clock for the current timestamp.