What makes you think Movim is a “hosted service”? You can easily self-host it and many people do: https://github.com/movim/movim
The developers of Movim are also hosting a public instance, yes, but the official on-boarding page lists it as only one among many others. A bit like how the Lemmy devs also host an instance.
Revolt/Stout on the other hand is rather a “hosted service”, as they are openly discouraging people to self-host it and make it intentionally harder to do so.



As others have mentioned there are ssh keys and generally you can and should of course use a password manager.
However there is IMHO a huge blindspot of people using only SSH keys to long in, and that is that your day-to-day dev PC is actually more likely to be compromised in some way than the server that only runs specific, relatively well defined applications and overall just has less attack surface. And the ssh keys on your dev PC are really not very securely stored and thus quite easily compromised.
Hardware keys are of course a better solution, but I would personally recommend to use a 2FA solution that prevents access even when one factor (ssh keys or passwords) is compromised.