> Either you give the control over the data to a central authority, or you give the control to the user [receiver?], you can't have both.
No, there are middle grounds, such as a decentralized/local authorities. E.g. you send a hyperlink to the message on your server, rather than the message itself. Theoretically, you've still ceded control to the receiver, but practically, in most cases, you haven't.
