If I’m reading(skimming) the documentation right, it seems like anyone who can pass the challenge can download the full node and see the full record of interactions. IPFS is not a perfect privacy network, so user accounts can in theory be traced back.

So basically as with Fedi instances it is fully on the Node host to set who can get in based on the challenge, and what is hosted there is their liability. Only difference is Plebbit allows any user to spin up a new instance/community node ad-hoc and they aren’t responsible for maintaining infrastructure beyond what is required seed the nodes they host.

Is that right? I’m not sure but hopefully someone better in the know will correct me if not.