There have been a deeply disappointing number of mastodon account takeovers in the past few weeks used to spam out malicious links in the guise of porn. Iβm guessing most or all are abandon accounts, so the owner doesnβt even realize.
Please please please enable two factor authentication on your mastodon accounts regardless of which instance you are on or how sensitive or not you think the stuff you post is.