Anyone who owns a server can access all the data stored on it, unless the data is end-to-end encrypted. Whether it’s mastodon, Lemmy, Facebook, twitter, Gmail, vBulletin, whatever.
If you need to say something that you can’t risk anyone else seeing, use an end-to-end encrypted messaging app, or implement encryption yourself using e.g. PGP.
The backup service is good, inexpensive and easy to set up, so easy to recommend.
I now use their B2 service with duplicati (available as a docker container, but idk how well it works with Synology). It’s dirt cheap and equally reliable, but requires more setup by the user, and you must follow good practise and do a test restore of some files to make sure it works.
So it’s really a trade-off, depending on what you want to prioritise.
The web client supports it too, as do other apps like Tusky and Ivory. The official app is just a weird outlier.
Since they say that all their content moderation is currently being done by two backend devs on top of their actual jobs, that seems like a safe bet.
Totally negligible. All you need to keep is a line in a database with the person’s email, hashed and salted password, and a unique identifier for each game they own - that’s an amount of space that won’t even register on any service nowadays. There might be other optional stuff that takes more space, like display pics, cloud saves etc but you can delete those without deleting the whole account.
I don’t think we’re heading towards an everything app, but we may well see an everything account at some point. Companies already use social media management portals to post/respond on multiple platforms; I think if that kind of commercial demand arises for fediverse services, we will probably see similar fediverse management portals which allow you to interact with content on multiple ActivityPub services in a context-sensitive way via one account.