varsockFYI: Lemmy.world and other instances were hacked. Beehaw.org took itself down to mitigate risks
And this is why you don't trust tankies. It's very easy to compromise the software and put back doors into it.
Use kbin instead
Spreading FUD over a group of people's intent with their software that they personally use is an odd take, when kbin could very well have similar vulnerabilities in its codebase. Federation is good as part of limiting the attack vector one of many implementations and a subset of all servers hosting and routing media content. Kbin is just another set of federated content servers, with there being no guarantee of who develops the software being inherently more competent than those who develop Lemmy.