oh wow, activitypub has ssrf built in mostly not an issue on its own, but could be an interesting attack vector... definitely something to keep in mind.