Secondly, their Mastodon software version has not been updated for an extended period of time and has known security vulnerabilities. We do not want to risk any exploits with those vulnerabilities that may affect our users.
An instance that is unmoderated and insecure poses a risk to other servers it federates with. The Fosstodon team did not take this decision lightly, and arrived here after months of observing these issues.