@Natanox @partizan We are using a combination of ActivityPub, OAuth and Webfinger!
The real magic is the safety features, employing two levels of checks, and allowing people to opt-out globally with a single action.
That said, it is opt-in and we will notify people when included!