How do you know that meta hasn’t created an account on a popular well federated server and it’s using those credentials to scrape the fetiverse?

You have to assume whatever your post to the Internet is available to anyone and everyone connected. Why would federated servers be and different.