Divergent Apache versions could, in theory, be an artefact of virtualisation and thus aren't formally definitive in showing the two production environments don't share the same physical server.

It's easy - and quite a popular pastime - to poke fun at folks for alleged errors in OpSec nowadays, as if doing so were proof at how simple it must be to avoid such errors. OpSec competence temporally has a fairly high correlation with resource availability: or, to put it more simply, it's a hell of alot easier to pull off and pull off without major errors over time if one has plenty of cash on-hand. That's why one often sees such "errors" early in project timeframes - when cash is tight, corners tend to get cut.

None of these operations are getting finding from traditional tech VCs, eh? As such, it can be expected most are cash-tight in early project phases... which is a dangerous combination for this sort of business model.

Those with the proven, battle-tested, hard-won OpSec skills to do these things right are relatively unlikely to actually do them: why take that sort of massive risk when, frankly, there's plenty of other ways to do well financially absent such risk? That's not even counting the temptations of working for The Man - just referencing the "sell shovels to the gold rush frenzied masses" dynamic.

We're going to see some seriously overdue lessons learned on the structural constraints of FDE in server-side environments, that's one thing for sure. Folks who warned about such things prior to the "Summer of Tor Takedowns" were largely ignored. Now? Not so much ignored, I expect. An example tutorial: http://www.cultureghost.net/viewtopic.php?f=30&t=789

There's tech - and procedural expertise - to do these projects right... but it's a rare combination of skills and experience to bring that together with management competence, risk appetite, and motivation. Despite what seems like the "easy riches" to be had in such endeavours, I personally don't foresee an explosion of such marketplaces, post-SR. A fragmentation, yes... but that's quite a different dynamic indeed.