Just asking as I did exactly that and it kind of seems like it works? I would have thought there would have been some kind of checksum/key etc…
The only issue I’m really running into is that it says subscribe pending on some communities when I try to subscribe but I’m assuming that’s due to being overloaded etc…
Is there anything major that I’m overlooking?
Note: The server is personal so hijacking existing usernames isn’t an issue but I’m assuming it would be if it was populated?
As for hijacking usernames: If you are able to wipe and reinstall the instance you likely have the ability to just set my password hash to something else and control my account. As a user you need to trust your home instance.
If the domain registration lapses and a malicious actor was to pick it up it could cause issues potentially.
As I said: you need to trust your home instance in that regard. I don’t think there is a technical solution for these problems.