The posts and likes are all public. Some servers can charge users, and will likely have more resources to improve their offerings that way.
Apart from reading your private messages, does that mean you still need to trust that the server you’re connected to isn’t doing all those other things?
It's a bit more complex underneath (e.g. the are light-clients that you can entrust with part of your key), but that's the gist.