That's an issue, certainly. But by default, Debian has no outward-facing services. And by default, ssh login by root is disabled. One would hope that people swi

That's an issue, certainly. But by default, Debian has no outward-facing services. And by default, ssh login by root is disabled. One would hope that people switch to key-based authentication, and keep their private keys safe. But yes, people screw up sometimes, and maybe hobbyists do more often. Installing nginx is easy now, and the defaults are quite sane. The configuration logic is a little counter-intuitive, but it's not hard to find setup guides online. I'm not so sure about the practicability of a user-based Web. For one thing, most ISPs are touchy about websites on home accounts. And many plans still have low upload caps. In the US, anyway.