for me the biggest issue with mastodon is that it is not compliant with UE LAW for example nudity or porn is available without login just using public feed or federated feed. On mastodon.social you can see literally hardcore stuff. But also Mastodon GMBH is misleading users how the priacy looks in mastodon or what are the posts visibility options working...
also the funny thing is that there is thousands of so called privacy advocates threre advertising advantages of using big tech alternatives for example pixelfed... and if you ask who is storing yours data (i've asked directly owner dansup) you will get no answers. There is also nothing in privacy policy. That is not compliant with EU law... or privacy advocates storytelling...