evil* idea for likes/shares/etc collections that allow interactions by direct POST. instead of POST to inbox you just POST to the collection. the collection can return 4xx if your interaction isn't accepted, and if it's missing you just "can't" interact that way. basically every interaction collection could be its own "inbox" in a way. you could still use something like AP outbox delivery to forward published activities to appropriate targets.

*not really evil