@evan my understanding is that those properties are stripped if forwarded along in another activity, but not on the original send.
Please please please I mean no offense by quoting the AP spec to you 😅
https://www.w3.org/TR/activitypub/#server-to-server-interactions
It's not explicitly mentioned but that paragraph talks as though bto/bcc are present.