Though, to be honest, "who can see something" privacy settings are kind of best-effort in a federated system.