> When someone shows me an: open sourced, graphical, log based, spam ip filtering, self hosted, server alternative to GA that I can set up in < 10x the time I will happily switch to it.

https://goaccess.io/ ?

I would pick it over Google Analytics for any privacy-focused open-source project even if it doesn't tick every single box in your list.