First if all: my Not Sure Fry was intended as a joke.

So, just to understand you correctly:

I can collect just about everything in the DB tables I’ve seen without being logged into the instance with some external work. Can you see which communities I follow? Which feeds I watch (and when I do that)? Who I interact with through DMs?

are you trying to get my point?

you are (still) missing my point - but i might be wrong as well (i am mot too familiar with ActivityPub).

my point is not that my public posts are in fact public and can be (and probably are) mined through unknown parties, but that instance owners have even more, probably more valuable info, like IP addresses from which not just geolocation but also wake times, device usage patterns and other gnarly stuff could be extracted, that could - together with other personalized surveillance info (like the usual adware stuff) - be aggregated to give a bigger picture.

just showing (as you did) that one can get some info about me through my (public) actions does not refute the point that instance owners have access to more, not-so-public information

you miss the point: instance owners have quite a lot more information on their user’s activities than what’s public.

or would you argue that reddit does not aggregate data because it’s all public?

GNU Guix

not sure if shitpost or shit post