text: We have had stronger credible exit for 6 years in @peergos.org which encrypts posts. Even the encrypted data isn't public, you need a mirror capability granted by the owner. It's designed to allow sharing to large, changing groups - what the scaling limit is though I don't know.