@me If the contents of the post are pulled through ActivityPub and the notification is sent out as a reply with a forced tag, the risks are pretty low.

But only if everybody is doing it that way.

I worry that a forced tag in Mastodon-to-Mastodon quotes will give a false sense of security that it works the same way for all fedi quotes.