I largely agree, but a couple points I'd like to challenge: Is hardware corruption really happening and making it into the WAL stream with checksums on? The next point, on planner hints: it's really just something that hasn't been done. If a few engineers made plans to tackle the problem, a lot could be done in a couple releases' worth of work. In the mean time, people are getting by with various half-measures anyway…
Also, pg has initdb --data-checksums
Or does this fall into the "everything neat with PostgreSQL requires major downtime" category? (features, version upgrades, etc).