false choice. If you allow arbitrary user controlled locations, users can keep their data, for example, on a friends vps (which hopefully is on mirrored disk a

false choice. If you allow arbitrary user controlled locations, users can keep their data, for example, on a friends vps (which hopefully is on mirrored disk and backed up to another provider) and get a reasonable degree of reliability without sacraficing privacy.