Most activitypub implementations rely on webfinger anyway and I see that threads.net's webfinger solves the problem by returning proper URI even if I mistakely request mosseri@www.threads.net.
But www subdomain is desirable for cookies isolation in cases when site has multiple other subdomains for different purposes.