@smallpatatas @mike Ultimately I would not use the words "leak" when talking about data that is being broadcast to the public web. A "leak-proof" Mastodon server would have to go beyond authorized fetch mode, and be effectively unusable by logged-out visitors. On the user level, the most effective way to control where your posts go is to post followers-only.