mike is definitely right here. i took a gander at reddit, facebook, mastodon, and signal's privacy policies. they all pretty much have the exact same verbiage.
it seems far more likely that one user with bad opsec capitulated to a demand email rather than bluesky narcing in <24 hr on saturday lol.