Out of curiosity, why don't you use Redis? the new redis cluster feature let you shard data to multiple servers.
Do I need to call user.isAdministrator on my plugin's admin page?
...or does NodeBB make sure all requests and posts to
You don't have to. NodeBB core makes sure all requests to those routes are from admins.