The simple fact that lemmy federates posts will mitigate the problems posed by this. For example if they want your IP, they need to go to lemmy.today, but for mine they will need to go to tchncs.de. If we were using reddit, they would be able to get everyone’s address with just one request. The more small instances there are, the harder it becomes.