Implied trust and how easy it is to break it. How various safety and privacy features added to ActivityPub can be useless in the eyes of users unaware of inner workings.