Considering the #TagsPub mess and the fact that it's made by a co-creator of the #ActivityPub protocol: is AP fundamentally incapable of doing consent by default and if so, how to replace it by a private-by-default protocol where every interaction must be authorized by all parts?