Taking Mastodon security to the next level

Seems like a technical ad for their product. If the thread model includes malicious admins then all bets are off as admins can change both server-side and front-side code.

Some measure of security could be achieved using browser extensions (c.f. Mailvelope or https://stosb.com/blog/signed-web-pages/).

Interesting, and I bet you could do a browser plugin to handle some of this on sites that don't support this. I wonder if OTR has a browser plugin.