> But if you allow user generated content on the home page of your site, there's not a distinction (from a Mastodon user point of view) between the two.
If you allow UGC with *arbitrary HTML* or explicitly support generating rel=me. Both are you explicitly giving someone control of the site (or at least letting them claim they have it).