Pixelfed: Pictures from private accounts are visible in public feeds?
Stumbled across this yesterday, using recent 2.38.0-beta1 and a pixelfed.social account:
- Some posts floating by in my timeline can't be "liked" or "commented", tapping on them ends up in the app displaying a "a 404 error has occurred" message.
- Trying to open these posts via "open in browser" results in a browser displaying an error message.
- Navigating to the pixelfed user profile that seems to have posted this picture in fedilab displays an empty profile with a count of posted images on there and an error message again.
- Opening the profile via "open in browser" ends up in a message that the profile is private (and no images are displayed).
Expected behaviour would be: If there are post on a "private" profile, they should not appear at all in a "public" timeline and/or for users not following that particular profile?