@Jerry@hear-me.social @aral It's a "vulnerability" in the same sense that it's a "vulnerability" that you can fairly trivially set buildings on fire for no reason if you really wanted to - it's a misuse of legitimate access/privileges for an unsanctioned purpose, in a way that's not preventable through technical measures.

That's why it's so important to look at fediverse security not just from a technical perspective, but also from a 'collective safety' perspective where people are held accountable for malicious behaviour.