I think the only thing that would give more trust is a remote attestation setup similar to GrapheneOS[1] since it's the only way to prove that servers are runni

I think the only thing that would give more trust is a remote attestation setup similar to GrapheneOS[1] since it's the only way to prove that servers are running the software they publicly say they are. The configuration would have to be run at the hypervisor level, so that logging couldn't simply occur by nesting the server in a VM then logging that. [1] https://attestation.app https://attestation.app