-
LucyDavinhart @samanFUN It's only direct messages to folks on that instance that get federated, but any toots that are private (followers only) are still federated and can be read.
-
LucyDavinhart @samanFUN They even state this in the readme: "Private posts are not encrypted. Make sure you trust your instance admin not to just read your private posts on the back-end. Do not say anything you would not want potentially intercepted."