You know, I think I’m going to make some software that just siphons every ActivityPub message (ignoring delete requests except to log them) and call it “GDPR THIS”. The amount of mysticism and confusion around two very basic concepts (ActivityPub works by copying profusely, and the GDPR has no weight outside of the EU) just leaves me baffled here.