If you want to stay private, probably avoid a networking protocol like ActivityPub that inherently relies on essentially everything being public
I want to stay as far away from Facebook as possible, my actual private data is safe because the login stuff doesn’t get federated and there isn’t much of it.
I don’t mean to alarm you, but Meta can see this post even if Threads doesn’t federate.