GNU Social is Open Source and federated. Your criticism is still valid, obviously there is no way to validate that a GNU Social instance is not running modifie

GNU Social is Open Source and federated. Your criticism is still valid, obviously there is no way to validate that a GNU Social instance is not running modified code. But the federation itself mitigates this to some extent. If you don't trust one instance, you can always fire up your own.