@frost So the moral of the story is:

If you're on Mastodon.social and they're enforcing Authorized Fetch and you think a domain block you configured for your user is going to protect your posts from being fetched you have been greatly mislead. You must get the instance operator to block the domain for everyone.