ActivityPub should be an open protocol, yes. Just like, say, mail is an open “protocol”.

You’re still prohibited from sending child pornography, explosives, dangerous chemicals, etc. through the mail.

Gee, I wonder how that works!

May I recommend thought? It does wonders for not making you look like you wear clown pants.