Todoist is fully hackable via our API https://developer.todoist.com/sync/v8/, and your data isn’t locked in.
The self-hosted solution isn’t an excellent option for a todo list as integrations, plugins, and apps are critical. E.g., we actively maintain over ten apps and plugins and integrate with 100s of others (e.g., Zapier).