

That is wrong. GDPR of course covers public information. It simply does not force platforms to hide this kind of information. But transmission of these informations without user’s consent and especially sale of these informations could possibly be prohibited by a court referencing GDPR.
Absolutely.
But if a fedi software/instance decided to do something else with this public data, it could get legally problematic. That is the point I’m making.