When Semisol says all websites are insecure and can be backdoored by a developer unilaterally at will, he's absolutely correct.

But it doesn’t have to be this way.

Here's how I'm addressing it with NostrHub:

By bundling my website with its code and turning it into a single executable file, when the file is clicked, it opens the NostrHub page in your browser.

The key part: instead of using my server, hosting, and domain, it uses your NostrHub bundle and runs locally on your device, no server or setup required. Think of it like self-hosting on steroids.

Once you download the website bundle, the developer has no further control over it. The user truly has full control, which is extremely rare on the web. Even if the developer is compromised, no backdoors can be added.

To update, you simply download the updated bundle and replace the previous one.

This approach may not sound flashy, but it genuinely addresses a fundamental issue with the web as a whole.
nostr:nevent1qqsdqe0235323pyjj9pkngvsaeevrpazfctqk03jjnttxme5agf98esprpmhxue69uhhyetvv9ujuumfv9khxarj9e3k7mf0qgsvdac80utfn4gvly4fv54la0l6cp0udpptnm3ezzyajkdc44w53lgrqsqqqqqpca83xd 

 See if this can help you

https://github.com/nostr-protocol/nips/pull/1538 

 Thanks for sharing, Just 10 minutes ago I was going through you relay web hosting repo. 

Nostr relay will be primary hosting for my NostrHub public website with PKDNS. It's very lightweigh. 

 Ohh yeah, there is this one as well: 

https://github.com/nostr-protocol/nips/pull/811 

 Now that I’m thinking more about it, it might be straightforward to enable a version directly & transparently using relay. I should do some testing. 🤔