“It's not that big of a deal that users don't understand how their privacy settings work” they said.

@u2764 Maybe part of the issue is careful consideration of default settings?

If default was/is set to authorize only followers on your server, folks would need to opt-in to authorizing others and offer opportunity to explain risks?

Getting default settings right even bigger than this example.
@Gargron

@Tdorey @u2764 Stuck between a rock and a hard place here. It's not like adding a warning like that to authorize new follower screen is hard. It's all the folks who have existing followers that now have to think about this for future private posts (*if* they have non-mastodon followers, which I feel must be rare with >1000 mastodon instances). I added a screen to review them ("Authorized followers" in settings)