> I love this idea, but my two "deal breaker" worries are: (a) data backup, and (b) security.

There's no reason why this system couldn't use duplicity with a password to back up to S3 or a similar service.

Since it's just a Debian package, it could use the standard Debian automated-update system to handle security.