The problem is that someone always controls that service. So they can always go after that person (irrespective of where the service is) and force them to modif

The problem is that someone always controls that service. So they can always go after that person (irrespective of where the service is) and force them to modify it. I was thinking you could have some sort of satellite service with data stored on the satellite. Allow multiple authorised ground stations to connect and store/retrieve emails for users. But again, the person that controls the software and operation would be a target.