@argv_minus_one
1) a server connects to activitypub (big firehose of everything on fediverse)
2) when a user requests their TL the server curates that for them based on who they follow or for the public timeline things that are marked as public

but there's nothing keeping someone from writing a script that connects to activitypub and filtering "all posts by @argv_minus_one" and not choosing to respecting your visibility settings. so they could see everything yes.

amirite @tobi ?