It's still early days, but Tiny11 Builder appears to deliver the de-enshittification capabilities I was looking for.