Sandstorm is awesome but requires significant modifications to apps in order to work within the system. Also, it doesn't solve the complexity problem. You still need a programmer or sysadmin to set it up and manage security.
See also Cloudron, Yunohost, Umbrel.