What about pinephone?
gthutbwdy
I think people often forget federation is not a new thing, it's a first design for internet communication services. Email, which is predating the Internet, is also federated network and most popular widely adopted of them all modes of Internet communication. It also had spam issues and there where many solutions for that case.
The one I liked the most was hashcash, since it requires not trust. It's the first proof-of-work system and it was an inspiration to blockchains.
Yes, I write credentials in a file and encrypt them with my public key. Then I use my private key to decrypt them when needed.
I use gpg to encrypt my passwords with my public key. Benefit is that adding credentials to a new file doesn't require me to type the master password (password for private key). I trust gpg the most for security.
I don't know too much about lemmy yet, but all of these things (tagline,siudebar and legal info) sound like they should be controlled only by admins, that should be able to add html code anyway (since it their website).