@julian In this case I didn't interact with the server in question at all. Someone I follow boosted the toot on that server, hence my instance fetched it and got a toot back with the variable replacement which now showed up on the public feed of my instance. Leading to someone sending me a DM to check if my instance was possibly compromised. Which it wasn't. But the stole time from a visitor of my public feed, me and the company hosting my instance. LOL, I guess?

Sometimes I learn things about #ActivityPub and wonder “what the hell were they smoking?” https://cyberplace.social/@GossiTheDog/114058565002752078