I think this is where relay support for middleware or extensions comes in. gRPC or whatever. So much is customisable from a few entry points or as drop in middleware.

Rate limiting, publishing controls, metrics, spam detection, external whitelists/blacklists, degree of separation, auth/membership checking, etc. Even perhaps GUI interfaces.