It’s a start, but 2fa can’t stop spam.

If one can automate account creation including saving totp secrets, you suddenly have 2fa authenticated bots able to send spam.

Maybe you could get around that to some extent by leveraging sms verification during account creation, but how do you set that up to prevent burner numbers? Or smishing?

These are hard problems to address

Hey OP, I’m on a similar journey (except I’m using an rpi kubernetes cluster)

I don’t have advice but I do want to wish you good luck

No, that is moderation.

These big communities were formed by people who may or may not have understood what federation means. This is the inherent implication that comes with subscribing to a community that is located on a separate instance. As long as the moderation tools are insufficient to stop rampant trolling, this is the only real reaction the instances have available If they are not willing to add a whole bunch of moderators.

Irresponsible is visiting other instances and not recognizing that what you post also reflects on your instance.

It is literally their community. They host it. They moderate it.

“Lemmy” is not a community, it is a loose federation of instances that can choose not to federate with other instances.

Your outrage seems based on “HOW DARE THEY BLOCK US FROM OUR COMMUNITY”, but it was never yours. You were merely allowed to use it

You seem to be thinking of instances like ISPs or something.

Instances are closer related to a house holding multiple parties in multiple rooms. People from other houses are welcome to join, but with the lack of moderation tools, if people from your house act like fools or assholes don’t be surprised when your house is collectively barred.

The only reason people are so upset is because they have misframed what Lemmy is in their heads as some libertarian wet dream with no authority whatever. There is an authority. It is each instance admin.