@maya I've talked a bunch about where the real test for Mastodon will be adversarial pressure and this seems like a great example. When someone you don't want is going to scrape your content, what can you do?
Does Mastodon make it clear that you MUST opt-out for any attempt at privacy? Much like it should ditch DMs because of how woeful the security implications are? That is shouldn't even attempt to imply that DMs have any kind of privacy from instance owners?