I mean it’s pretty much the same as Twitter? All your posts are public* and anyone can follow you unless you activate the follower approval option. It’s the first thing I did when I created my Mastodon account. (And the first thing I did on Twitter as well.)
Actually now I think about it, on Twitter I also made my account private immediately.