@darnell @anderspuck @randahl yeah, makes sense. In this case though, there's no private info that can be leaked via AP unless they specifically build ways to leak it.
Everything that a user publicly posts, would be publicly federated. It's a simple point of consent.
If they'd write into they're "totally legally binding TOS"🙄 that anyone that signs up, is agreeing to these things, they should be in the clear, just like they seem to get away with everything else they put in there.