@janl@chaos.social IMO this should either be ran by the instance the user is already on (because you already trust them with exactly that data), or be incredibly upfront that you are now *indefinitely* trusting a third-party with all this data and permissions