I have a couple of ideas (and/or can both be applied here to some degree):

- improve vpn to the point that people can and will use it to browse their photos.

- make hardened login solutions, run services behind that

- local hosters, stronger data protection rules

- fringe benefits at work or as part of union membership? (I admit I don't like the lock in aspect of this)

- make software local only by default

etc