Right now I don't have any size enforcement included in the hosted solution. And individually uploaded object can be up to 25mb (IIRC). If users start blowing

Right now I don't have any size enforcement included in the hosted solution. And individually uploaded object can be up to 25mb (IIRC). If users start blowing out the S3 usage, then I might have to revisit this. The hosted solution (and the self-hosted on AWS which uses the same deployment methods) automatically backup every night by dropping a database dump on S3. There's some manual work required to restore from the backup but I haven't had any issues with it so far. All the images live on S3 which I'm treating as durable. If you self-host on a Raspberry Pi then you're on your own for doing backups. I've thought about the different groups feature. I haven't decided if it's one I want to implement. It might be the top of the slippery slope of adding too many features.