Anything missing/incorrect here?

Anything missing/incorrect here?

Almost all of it looks good to me.
I would strongly disagree with "privacy" being set to "high" for nostr. You can't even have a followers-only account on nostr, whereas you can on basically every other platform (and protocol).
When everything is public and it's trivial for anyone and everyone to track everything you do by default... I wouldn't call that "high privacy".
Other than that, there are only a couple other improvements that I can think of:
1. Have some kind of color coding or iconography to make it easy to compare at a glance without reading anything (e.g. red, yellow, green)
2. Include ActivityPub as another decentralized protocol. I get that it's hard to balance overwhelming the reader and leaving out other options. There are protocols like Briar which have real privacy, security, decentralization and identity, but lack in portability and interoperability.
I'd call privacy on ActivityPub to be medium, nostr = low, and centralized platforms = medium.
Thanks appreciate the feedback! Will update the Privacy aspect and consider color coding (used that on the chart I made comparing sound money properties).
Hadn’t heard of ActivityPub, looked it up, didn’t realize it’s what underpins Mastodon and others.
Seems that aside from the slightly increased data privacy (although admins can still access it right?), nostr wins on almost every other metric.
Will consider including it and Briar in the comparison… and yes, def hard to balance simplicity with comprehensiveness 😅
Ok probably won’t include Briar since it’s a different use case altogether
Yeah, ActivityPub sysadmins can see all the activity of their users, just like centralized services.
ActivityPub beats nostr in account recovery. Passwords can be reset. That feature being exploited depends on the server (big instances are very similar to centralized services, small instsnces are more likely to do a better job at sniffing out the scammers).
User responsibility (low). Typically excellent support from your instance as well as the community.
ActivityPub's interoperability matches nostr
It doesn't have a single point of failure, but it's not as resilliant as nostr, so in the middle on that one.
And I think nostr probably wins on everything else.
Moving servers requires the server's cooperation to keep your followers. So, it's possible unless your instance shuts down unexpectedly. Your old posts don't move with you (but they continue to exist on the old server until it shuts down). If your instance is down you can't post nor see your feed. Posts are not cryptographically signed.
Your instance is not a central authority. You can use the same account for Pixelfed (Instagram clone), Mastodon (Twitter clone), Lemmy (Reddit clone) and so on. But your account is usually tied to an email address. It's not strictly required, but it's so common I would say it's fair to say you have to give your instance admin a functional email address.