@manton Shouldn't Mastodon be making these semi-private posts much more secure?

It should have been impossible for you to get access to them for the cross-reply feature, otherwise there is nothing honest about their claim that your posts are "Followers Only" or whatever.