With activitypub, all the posts are easy to scrape (just add an extra header: Accept: application/activity+json), but most scrapers won't bother to do that, and scrape the frontend of instances instead.
A lot of instances have deployed Anubis or cloud flare to block scrapers. My instance has iocaine set up iirc.
It was properly sealed. The button was down, and it made the satisfying pop when I opened it.