

Sounds like a decentralized encrypted messaging platform is needed.
Decentralized probably isn’t desirable for this use case; self-hosted is. When designing something for that purpose based on a decentralized protocol like Matrix, it’s probably desirable to mandate that the most sensitive conversations take place using a server with decentralization disabled and a client restricted to using only that server.




Based on a quick web search, staff can only remove people temporarily for rule violations; it takes a court order to get a long-term ban from the NYC subway.