Like hacker news, I don't need one-thousand-and-one cool ui tricks. Just a simple way to share text and photos with people. There should be a pretty easy way to ensure something like that could be audited to avoid every known injection issue (XSS, CSFR, SQL injection, heartbleed, CRIME, etc..)
Currently, when I look at OwnCloud and Mastodon I just picture Wordpress nightmares.
As an aside, I'm still beyond disappointed that the Activity Streams spec did not even mention the word 'encryption' one time.
My understanding is that many federated services use ActivityPub protocol.
1: https://en.wikipedia.org/wiki/Fediverse 2: https://en.wikipedia.org/wiki/Comparison_of_software_and_pro...