Reposting as public:
All activitypub privacy is based on trusting all other servers. I always said that this makes any expectation of true privacy on the fediverse a fantasy. You can modify a mastodon instance to publically show all incoming private posts in 2 lines of code.
Same goes for locked accounts and blocks.