It's partially EU funded:
NGI0 Entrust is made possible with financial support from the European Commission's Next Generation Internet programme, under the aegis of DG Communications Networks, Content and Technology.
This project has received funding from the European Union’s Horizon Europe research and innovation programme under grant agreement No 101069594.
https://nlnet.nl/entrust/
Great idea! I think Lemmy and kbin could do with plugin systems, so instances could easily add something like this and other instance specific features if they want to.
There are also Servo and WebKit. Servo was kinda dead for a while, but the project was recently transferred to the Linux Foundation and revived by Igalia, with funding from Futurewei. Not suitable for daily use yet, but worth keeping an eye on. WebKit is of course used by Safari (which I guess makes it the second most used browser engine after Chromium), but also Epiphany on Linux. I'm not aware of any Windows browsers using WebKit. Fun fact: Chromium was forked from WebKit, which in turn was forked from KDE's KHTML and KJS engines.
Ubiquity stuff is entirely on-premises, their (optional) cloud service is strictly for auth and remote access. Highly recommended, not just for the privacy conscious. Their ecosystem is also relatively affordable (compared to Aruba and Ruckus) and a joy to setup and maintain. No subscriptions or recurring fees.