One cool thing is that you don't need to set up a mastodon instance in order to run a spam campaign. If anyone wants to give me a million bucks I could whip up a tool that'd require fedi as a whole to go allowlist.