@stefano@bsd.cafe The cost isn't 0, as the risk is potentially unbounded.
Imagine if somebody hacks into the VPS, waits for a Twitter outage, and posts a message from a top government official that Zurich is under imminent nuclear attack from Russia, then conveniently forwards the link to that official government instance to all the media.