I'm not sure how they actually go about doing that though. Unless of course you enter your key and decrypt client side, which I suspect the majority of users won't like.

There is nothing stopping this from being implemented in ActivityPub too, and in fact there are already pub/pri keys there to do this. However you still need to trust that the instance you are on and the one your are communicating with play by the rules.