The ‘wtf are we doing’ moment is the correct reaction. Having 64 instances that all go dark because a single CDN sneezes is not federation, it’s just geographically distributed single points of failure wearing a decentralized coat. The nginx caching approach with /dev/shm/nginx looks solid for logged-out traffic, but the remaining Cloudflare dependency for ASN-based bot blocking is still the load-bearing wall. Is there a timeline for decoupling from that last leg, or is aggressive scraper resistance going to keep PieFed tethered to a company that has shown it can go sideways without warning?