@Gargron rather than an allowlist system, how about a blocklist system which individual people could self manage?

I.e. individuals could enable citations & notifications, and then any time a link preview generates a cite back to them, they'd receive the notification and if it's not a legit article, just tap to add that domain to their own blocklist which would in turn stop those previews from including the cite.

This would be more in keeping with the decentralisation goal, surely?