Thanks for that. I think I was getting confused between turning off all federation and defederating with an instance.
Setting all that aside, I would caution that even turning off federation isn’t enough to necessarily make it truly private. People could still discover it through random portscanning or whatever.