> In theory, an attacker could scrape the social graph of every user in the entire fediverse and build a list of who you follow from that. I don't think that's

> In theory, an attacker could scrape the social graph of every user in the entire fediverse and build a list of who you follow from that. I don't think that's a realistic threat. In practice, multiple entities across the proficiency-spectrum are already doing this. An average motivated CS undergrad or two could certainly pull it off. Up to you if you find that a threat, as with anything.