You can export and backup the keys but I get your concern. I’ve been looking into what it would take to support pkcs11 so you can store them in an HSM.
Over the DHT. It should be much faster if you were to enable ipns pubsub.
Looks like your last bullet got cut off.
You can use DNSLink for mutable data by just pointing it to ipns rather than ipfs but I get what you’re saying here. In this case DNSLink just gives you a more memorable address.
Personally, I’d go for some minimal VM from a cloud provider, enable pubsub and use it just for publishing IPNS.