I was thinking the absolute worst case scenario is a bad faith use of the regulatory laws aimed at Meta but put on a firehose and aimed at federated servers who don’t prostrate before them.

Things like partnering with copyright holders for automated DMCA floods for literally all images on the instance that have copyrighted content visible.