@kissane
Most of the people I’ve seen making these assertions are basing them off what seems to be technical limits in primary linkages to ActivityPub which I don’t doubt developers are trying to make real and useful security goals. What they never seem to address are external secondary linkages like you (& many others like myself see) that may be used to steal data and void privacy & security.
They are technically correct but functionally mistaken.