> It violates the "user data stays on the PDS" principle, as repo data stay on knots, not in PDSes.

I'm not familiar with ATProto; what does this mean in practice? Does it just change the failure modes if something breaks?