Excellent analysis and great work in showing how important it is to run API nodes at home and not having the whole Hive network almost completely reliant on only 2 datacenter operators.
As you may have seen from my current post I am looking to follow your lead.
@felixxx had raised the need to not have a witness node and API node on the same IP address (same internet connection) and your solution of a non-public API node with jussi running on a very light weight local data center node providing the public face is an excellent idea.