I'm convinced the barriers are there by design.

The why behind IndieWeb [indieweb.org] is stated as: "Whatever the reason, you're done with sharecropping your content, your identity, and your self."

Given the vast numbers of people still using Tumblr/Facebook, it's not a place the vast majority of people are at. Which means any "solution" IndieWeb offers will be to a problem most people don't have or care about. Particularly when the proposed solutions have significantly more friction than continuing with the status quo.

because when it comes to construction, everything takes longer than they estimate.

that would suggest you are back home. ??

apparently. I also think the whole "security audit" is not as big of a deal as some are making of it. Other than the various Open Source solutions, what commercial solutions have undergone a similar audit? And what guarantee is it that there isn't some goatse and fail hiding in those solutions that the auditors missed?

The web browser plugins are the biggest source of goatse and fail by far. By not using them, I keep the potential attack surface…minimal.

he actually got a record player for Christmas (one of the newfangled ones).

it pleases me, too. He's picking some good music.

When I was in high school and college, I was buying music on CDs.
My high school-aged son? In addition to streaming, he's buying stuff on vinyl. ?

They are still promising it for the next major version.

I totally understand their logic for deferring it, especially if they're doing a major revision. I still feel I can limit the potential risk by not using the browser plugins. :P