oh btw

something that fedi admins might want to know; TOR-hosted instances (.onion) can simply use exit nodes to fetch posts from real instances

it might be worth it to look into blocking the whole TLD .onion, since by default mastodon will just allow fetching from there