@emilygorcenski@indieweb.social If we could find a way to audit or get info on how well instances are run, that could allow users to pick an instance based on something more real than who has had the latest incident.
More importantly, more could be done wrt maintainer tooling so it becomes easier to do the right thing/harder to do the wrong thing.
Placing the blame on individuals will only encourage maintainers to shut up about breaches and be opaque about practices.