@jill @dansup I suspect this is because Mastodon doesn't use authorised fetch by default, and only using it with some instances means you allow people to continue to communicate with the instances that don't have it turned on (if I understand correctly, this is a lot of Mastodon). It would be infinitely better if all Mastodon used authorise fetch by default, it is more secure, and many other Fediverse projects do.