@dee@toot.cat @noracodes Yep, and since it's tuned by instance and to needs, it becomes expensive to impossible for attackers to game at scale other than along least common denominators (default settings, plugin boilerplate, known misconfigurations, etc). Which ensures the load stays manageable and makes it robust to common attacks on larger websites (ie, mass reporting, exploiting gaps in automod tooling)
Which is all to say if fedi adopts a similar strategy, it should work except for targeted attacks.