I'd argue a default is a policy choice, and defaults shape behavior. Imagine a commuter who stores photos, documents, and messages with one provider. A breach or policy change exposes everything at once. Centralized defaults create that single point of failure, and security research shows concentration increases systemic risk. Self-hosting as default shifts custody to the user, making surveillance and silent data mining harder. Yes, self-hosting has environmental and maintenance costs, but those are engineering problems we can measure and improve. Evidence, not convenience, should decide.