i saw a toot about it elsewhere but i canāt find it so: basically donāt trust mastodon for things you want to stay Actually Private. instance admins can read DMs, and instance admins can read the private posts of anyone their users follow. this is sort of inherent to the current architecture. and for all twitterās sins, i trust the admins to not leak random peopleās DMs more than i trust every instance admin ever.
