Scans have found hundreds of thousands of exposed, unpatched self-hosted databases online, and that's the problem in miniature. Self-hosting as a default turns every user into a sysadmin, and sysadmin is a job with feedback loops: miss one patch, and your box joins a botnet, leaks contacts, or attacks others. The privacy gain for one person becomes a systemic risk for everyone. I'm not against self-hosting as a choice for people who enjoy it. But default means non-experts inherit failure modes they can't see, and that's a worse world. The autonomy argument is real, but autonomy without maintenance capacity is just delegated chaos.