KingIf Lemmy became popular, what would prevent any three-letter agency from opening a server to get all the user data?
aprilThe data is already public, that’s how ActivityPub works
BlackmistYour account details (email, password hash, IP address) are held only on one instance, but yeah, the rest is shared.
You don’t even need to set up a server, you can scrape pretty much anything of value. And they already will have done.
I think that some data such as every single upvote and downvote an account makes isn’t public but can be viewed by admins
As far as I understand votes are published as ActivityPub messages, otherwise multiple servers could not have the same vote counts. They need to be able to deduplicate the same vote coming from two different servers.
So everyone can read your votes there’s just not an easy UI for it.