The fundamental way that activitypub works is the antithesis of how data sovereignty needs to be designed.
But once you get over that, the way it is implemented by the major platforms today is _also_ the antithesis of how you need to implement these to have good data sovereignty practices.
This doesn't mean that they aren't worth aiming for, but it also means that it isn't as simple as "it's decentralized and therefore better."