Yeah, I think that caveat applies, with the same disclaimer for me; I haven’t studied the code or architecture in detail, I’m just going off a high-level understanding of how this works. The “server of record” is the server that re-broadcasts everything to those that federate with it so it can act as a filter.

ActivityPub is a nice idea, but I can imagine some manipulative shenanigans an instance could get up to with this kind of setup. I hope there are mechanisms for detecting that sort of thing.