current thoughts on mechanics of posting sensitive content here; anything wrong?

toot unlisted: visible if rando views yr timeline; goes to all followers; seems? to be excluded from tag search, even if you tag it (though why would you)

toot private: only visible to followers ON YOUR INSTANCE; those off-instance cannot see, i'm told

toot direct: must list all recipients, so only feasible if you're only including a few people

general privacy: once a toot is federated it is on the remote instances forever; you lack ability to delete everywhere but yr local instance. therefore use an external hosting site for sensitive images so you can delete them at will.