after a week of patching hilarious masto security holes, a few days of entirely preventable spam waves, and ten minutes reading through a single file ActivityPub implementation by @Edent
...I find myself having to resist the urge to just go write my own AP server.