Yeah, no, that's my exact point. It's not like data in the "fediverse" is particularly secure, beyond the fact that you can opt out of some parts of it in some applications. And it's not like it's not social media doing social media things.
I see a lot of this performative outrage or pride on being on the "open" version of social media, but social media is social media. A lot of its problems are design problems that are replicated in the federated versions, and a lot of the privacy concerns remain on paper or haven't surfaced just because this version of it is so small by comparison.
I don't think a lot of people who have made this crusade a key part of their online persona fully understand what the underlying issues are and how they work. "How can cybersecurity experts have a TikTok account" kinda reads like the "we need to ban plastic straws" of Internet dysfunction.