From my understanding between defederating and opting into fetch authorization this can be mitigated. Not prevented entirely, as you said they can just make accounts anywhere, but it prevents serving it up on a silver platter.
Besides that the data alone isn’t the point. It’s that combined on top of everything else.