Not sure if this fully addresses your use-case, but I like the idea of serving a static bootloader from IPFS. The bootloader would contain all of a website's assets, and code for getting dynamic content from a backend. The backend could be:
- A central API where the bootloader can do arbitrary validation on the API responses.
- A central API where the bootloader can do arbitrary validation on the API responses.
- WebTorrent, Scuttlebutt, IPFS PubSub, etc.