I've been thinking the privacy settings here aren't actually privacy settings (because they're full of holes) but rather *exposure* settings.
I think exposure controls (i.e how many people *will likely* see things) are great, but maybe the features should be renamed to reflect that they control exposure, not privacy (i.e. how many people *can possibly* see things)?

@abgd I really like this. It's highly misunderstood how privacy works here, for example most people don't know that a rogue server could just grab your atom feed rather than politely notifying you that it's following you as mastodon does.

@geekylou @abgd does that hold true for private posts (aka DM)? i guess intra-instance private posts stays within the instance (probably admin has access and could theoretically read you private posts to a user on the same instance). what is the weakest link for a private post accross two instances? can a third instance see it? or it again depends only on admin of the recepient's server?