The CMS interface is only a small part of the value. If you cut loose and try to run a high profile blog/newsletter on your own, suddenly you're paying for IT p

The CMS interface is only a small part of the value. If you cut loose and try to run a high profile blog/newsletter on your own, suddenly you're paying for IT professionals to do security because you are a high profile target and what you want to do is write, not stay constantly up-to-date on hardening your CMS, database, and sensitive information. Good operational security for a website with the threat model of a high profile, heterodox journalist probably costs tens or hundreds of thousands of dollars annually. If Substack can effectively economize the provision of security for the blogs/newsletters of high profile writers, they might actually reach a scenario that inverts the dynamic of others like YouTube or Patreon: the higher your profile, the more attractive something like Substack becomes; the lower your profile, the easier it is to handle your own website administration and not worry about security.