what we've got here instead is concentric circles: the entire gnusocial network, your followers, any single follower. so, outside of dm (which, like all the privacy here, was compromised even before the exploit), anything you publish on your timeline will at the very least get to every single person who follows you. following people and accepting followers then becomes an all or nothing affair. that's not good consent practice but it is pretty much status quo for social media. we can do better than status quo.