@FediThing I haven't tried it out myself but my understanding is that requests that don't contain an ActivityPub signature of sorts will be blocked.
Many fediverse clients will support that, not just Mastodon but it's true that you might find some exceptions, especially if they're older.