Article says it’s the rough woodlouse.

I think it’s inevitable; I imagine that in the future there will be an application and vetting process if you want to federate with a major instance, as most users will not be interested in running their own instances, and your federation can be a source of work for the mods/admins.

I would like to underline and insist on using unique passwords. Many users like myself are joining small instances to get better performance and reduce the strain on the main servers, but anyone can spin up an instance and then poof, your password is gone if they can get you to sign up!

This was always the case for normal websites on the internet however. I strongly recommend everyone use a good password manager to prevent one breach from cascading into a breach of all your accounts. It’s good OPSEC.