If this is just for tin foil hat types, blowing off nerd rage and striking a pose against 'the man', this is a great project and might spin off some useful software, mostly as a side effect.
If the intent is to keep information off of maga corp servers, it is even better since those guys have proven over and over they see mining our personal information as the price of the 'free' service. Yes I'm looking right at you Google. And Facebook, etc.
However, if it is intended to be used by people in repressive regimes it better have a LOT more effort put into it than grabbing existing software and sticking it on a plug computer or router and slapping a happy fisher price interface in front of it. People in those countries who aren't clued in might believe the hype. They will die and their blood will be on the hands of the fools who deceived them.
Squirrelmail? PHP? Really? Has a year gone by without an exploit? Just how long would that last against Chinese Intelligence agencies, or the Russians? And the way the political climate is going, someday soon, God help us all, this thing will probably have to withstand the NSA. 0% chance of survival.
These plans aren't even on the same planet as a plan to build something to withstand that sort of penetration attempt. The conversation should start with something (as much as I hate Java) more like Android with separated Java containers for each network facing component and a master that watches each one and disables it at the first sign of penetration, turning a penetration into a DoS. Or a single exposed network port with a small audited out the wazoo server that talks XML and validates the holy heck out of all in/output against DTDs that are so strict we forget the "Be generous in what you accept" style of design. Then that one heavily tested component sends super cleansed requests to separated processes that implement the various new protocols. And the various internal subprocesses can only communicate through the same gateway process to help ensure a contagion in one subsystem won't spread. Without a lot of manyears of dedicated pen testing by people I trusted I still wouldn't trust it with my life against the NSA but it might trust it if I were in a 3rd world county going up against their intelligence services.