The discussion here is going to be hamstrung without direct access to the entire Mastodon post:

https://infosec.exchange/@david_chisnall/117171776562702259