umm... so it's the intended behavior that private posts get federated as non-private, with no barriers to resharing?

that's... a serious problem.

@ur_faec i thought they only got federated as non-private to places that aren't running masto
@shoofle @ur_faec yeah same and I definitely feel like they should only get federated to Mastodon instances/servers we know will respect privacy settings #mastodev 😿