Can anybody explain to me the absolute security disaster where I was able to boost and like that post, just using the native Mastodon API?
Does being suspended by an instance not operate like a block, where you can't see or interact with things?
That seems like a fairly serious issue if people don't understand how that works.