Sort:  

Only if you put a "one-time" password and then delete your account. A compromised system, today, is compromised FOREVER. You can only abandon it, unless the owner decides to rebuild from scratch.

The customers can own the system: just self-host. Today is not that hard. I am doing at home.