I don't see Federation giving any more resilience than Git itself. When a host deletes a repository, that's reflected everywhere by Federation. Unless you propose disabling the ability to delete repositories entirely, hosts would be sued if they press the "delete but still federate" button when they can press the "delete" button.