I recently learned that voting on lemmy is not anonymous. Anyone can get information about who has upvoted and downvoted a post or comment.
In combination with your IP, this is a massive privacy (maybe even physical security) risk. Also, people can target you for your votes.
Sadly, this is something where I would prefer Reddit over Lemmy. Big tech scrapes data from both places anyways, at least Reddit is safe.
Others have pointed out some websites and admins can take it a step further by seeing entire history for any user. Admins have way too much information on Lemmy.
No, users have way too little information on Lemmy. This whole distinction between “the admins, who see secrets and control the flow of information” versus “the users, who are only allowed to know what we tell them, and have to follow our rules” is a holdover from corporate structures of web service. For the most part, it has no place in the future I would like to see.
The technology makes it impossible to hide the votes. So don’t hide the votes. It’s okay, as long as people know that’s what is going on. But anything that creates that kind of lord-and-peasant dichotomy should be minimized as much as possible within the realities of how things are going to get hosted. Admins can read DMs. So end-to-end encrypt the DMs. Mods and admins can make deletion and bans. So put the users in control of who’s allowed to “moderate” their individual feed (this is one thing that as I understand it Bluesky actually did very right), don’t partition everything into spaces where at all times the “users” are powerless to overrule someone trying to control their feed for them. And so on. You get the idea.
That’s my opinion, others might see it differently, but I really don’t get why they copied all elements of the Reddit model when a lot of them have no place (or don’t even make sense) in a federated network.
Just wait until you find out how much info Reddit admins have on redditors