Adding validation/access control to server actions is pretty much the same as for API endpoints though?

I'm not sure next.js is the right fit for a blog/personal site either, but that's an odd point imo.

Your site looks very nice though!