About risk profile:
- Mastodon is like email because you can't delete federated toots
- Mastodon is like twitter in that Google's search bots index it, unless your admins robot.txt it away
- Mastodon is like being a teenager because the people that own your instance can see all your private stuff
Have a talk with your admin about their policies.
By default, assume everyone will be able to read your toots forever.
Disclosing "cellphone contacts and social-media passwords" goes beyond having "nothing to hide". It jeopardises other people that trust you.
I can tolerate the TSA pat-downs, but you can't ask me to make decisions with the rights of others.