So what happens when users trust the admin of an instance for their personal data (DM mostly), and that admin, because either the instance is growing fast or he doesn't know otherwise, uses big centralized "cloud" services like amazonaws, cloudflare, etc. with servers under US jurisdiction? Some users may not even get to know about it?
Should that be part of the "score" of various instances?