I think something like Sandstorm/Cloudron is the way forward with decentralization. I'm more than happy to pay someone else to manage all my services for me. But I see where my apps are hosted as the least interesting question. The important issue for me is lock-in. How easy would it be to switch if Cloudron does something I don't like, or if they outright ban me for some reason? If it's easy to switch, that keeps incentives aligned and fosters competition and progress. Does Cloudron do anything to mitigate lock-in?
Since the whole stack runs on your server there is no real way to ban anyone as such. Worst case is that you would loose access to updates, however all our app packages are MIT licensed (eg. https://git.cloudron.io/cloudron/nextcloud-app ) as such you could just build the app image with docker locally and push to your server manually.
