This remains one of my least favorite features of #ActivityPub.
1. It violates fundamental type safety principles.
2. "without authentication" means that it needs to be accessible to random people on the internet if read literally, and evidently changing this (along with "we should all require transport layer security") are controversial opinions in fediverse development.
3. Literally everything about that Note makes me die inside.
4. Yet another example of how "there are no servers in ActivityPub" is undermined by the spec. Because this entire concept and its use cases assume a server. "There are no servers" has always been a fiction, but this illustrates the tension.
5. It is the kind of thing that could be better implemented by using actors, but the protocol is unwilling to take that route for how to implement features.