I haven't had a chance to look into the federated aspect of BSky yet. I'm hoping some protections exist there - e.g. whether the firehose API can access just bsy.social, or whether it can access any instance. Hoping the former and a federated instance is down to the host/sysadmin to design.