How could a review service without an associated company/service be built? As in through some decentralised mechanism?

That seems like properly hard problem - reviews aren't objective facts like OSM data & verification/spam would be tricky.