they won’t be sent by infosec.pub directly, but other instances may send activities referencing content from infosec.pub, which will lead lemmy.ml to pull it from the source as well.

this includes for example posts and comments in lemmy.world communities, because lemmy.world will announce those to lemmy.ml.