BSky delegates a lot of power and capabilities to users - but this is Personally Identify Data we're tagging with lists/SPs, and post content/graph inference allows us to identify and/or infer Special Category Data. There's very little chatter about sensible governance of what we're doing here!