Reposting as public:

All activitypub privacy is based on trusting all other servers. I always said that this makes any expectation of true privacy on the fediverse a fantasy. You can modify a mastodon instance to publically show all incoming private posts in 2 lines of code.

Same goes for locked accounts and blocks.