Agreed with everything. I'd bet on scenario #3 though (namely IPFS and IPNS for now). You're sadly correct about the spam though. Still, a solution must exist.

I for one am sick of trusting corps only because they can implement software that protects their own servers. We can't be held hostages by spam forever.

(I would even wager spam is partially funded by corps so as to scare the users back to their walled gardens but that's uncertain and not especially likely.)