Depends on the specific instance. Some services run where they are natively accessible through tor, but most don’t.

Just remember that ActivityPub is a sharing protocol, and individual admins are fully capable of seeing everything. There is no end to end encryption, everything is stored in plain text.