I've been having a random brainwave today, which I am going to sleep on for weeks (probably months) before I take action.
For #Mailpile v1, we were adamant that we would never provide a hosted service. For good reasons!
I find myself reconsidering, for two reasons:
1. Not everyone wants to host their own software
2. I think I've figured out how to do this in a way that doesn't harm user freedoms
Security does suffer. But how much? Dunno, I need to mull it over. Feel free to object!