Part of #5, "easy to monetize" leads inevitably to "easy to enshittify". I think this is a point that's not generally well enough understood. If a platform emphasizes monetization, its early adopters will all be grifters and it will provide no benefit to anyone else (cf blockchain).

Gemini and Gopher fail #4 because they aren't application platforms. But I think we probably need to step back and rethink the "deliver sandboxed application that you run automatically" use case. If we really want to still do that, we might want to design something for that purpose from the start. But we might also come to the conclusion that it's fundamentally not a good idea.