How is it doxxing when they didn’t reveal his real name, address, or any personal info he didn’t post? I guess you thought not linking the post would hide this for your “dunk” (despite you being basically the only person who posts on this comm with little engagement), but even in the screenshot they mention that he was harassing the community.

No one should trust the developers of Lemmy. There should be third party audits of all updates for any sort of data collecting fuckery.

Is there any way for admins to gain access to private information on accounts through federation? I'm assuming not because all someone would have to do is create a Lemmy instance to start collecting information on a target.