@pettter @HerraBRE @bjoern consider stuff like Twister -- a serverless social network built on top of BitTorrent and (wait for it) blockchain.
There are no servers. Everybody runs their own stuff. The question becomes one of interface usability, not server management.
Attack surface against a single user instance running locally? Hey, at least there is literally no way to phish it.