I'm talking about private accounts with @mmn (dev of GNU social) and here's the caveat. Even if you federate follow requests, you can't guarantee ad hoc that the instance that receives your private posts won't publish them. Would private accounts still be worth with such a risk?