Honestly, I feel like the answer you’re looking for is a federated single sign on app. The real challenge will be building the right tools and community mindset for determining what a “trusted” instance is.