There I agree with you.
Making it public right now is useful to remove a dangerous false sense of privacy. But in the bigger picture I agree with you.
I wonder how one would solve that though. If you send a "vote" request without any user data, what stops you from sending 100?
yes, and any instance owner on any federated instance. Oh, and anyone on Kbin.