@wimpy Yeah, thats not the only issue with activitypub and federation.
apparently people can set up fake followers on a fake instance pretty easily with some scripts. with an account on a servery they wish to DoS attack, all they have to do is post something. a copy of the post is sent to every single follower, rather than one copy sent to each server that has the followers.