@f0x @t54r4n1 there's a second flag that disables most of the public 4.0 client API at the cost of breaking your logged-out web frontend with no end-user-facing explanation.
but the federated timeline streaming APIs that scrapers are targeting now long predates 4.0, is public by default, and the bigger servers are never going to turn it off because they like their little public tickers for showing off all the instances they're connected to.
private Fedi for grownups when 😩
@f0x oh, also blocking servers with bad actors. but like, that is standard,
but I hear you.