this pixelfed bug really feels like a design problem at the protocol level to me; it requires way too much unearned trust to expect a network of programs that are highly decoupled and barely trust each other to enforce one another's access controls, especially on the level of individual posts

0
0
0

If you have a fediverse account, you can quote this note from your own instance. Search https://mastodon.social/users/jcoglan/statuses/114228078070323168 on your instance and quote it. (Note that quoting is not supported in Mastodon.)