An open account's RSS feed can "leak" the contents of a logged-in only account

[bgawalt]

Here's a screenshot of the Beetle Moses bsky account's RSS feed in Feedly:

BMoses has reposted a post[1]from a logged-in-only user, and the post itself renders as "please log in to continue." But the title of the RSS feed item is also the text of the post. This is probably not what the logged-in-only user wants or expects, and I wanted to make sure this was intended behavior.

I know+respect that support for the logged-in-only option is in tension with atproto's fundamental commitments of anyone-can-write-a-pds-viewer, so, again, raising this just to clarify that yup, there's no easy fix for this "leak", scare quotes and all. It does seem kind of the opposite of the "logged-in-accounts don't autogenerate RSS at all":
#1991

[1]: this post: https://bsky.app/profile/andysokay.bsky.social/post/3mvp3shjcec25