@annika Sure, but that is not how Follow or List import works, right now, and Masto won't give that up.
You are not designing for the responsible and well-intentioned use-cases here, you are designing against adversarial users. And that, in any kind of non-centralized system, is going nowhere for the scenario discussed.