I recently learned that voting on lemmy is not anonymous. Anyone can get information about who has upvoted and downvoted a post or comment.
In combination with your IP, this is a massive privacy (maybe even physical security) risk. Also, people can target you for your votes.
Sadly, this is something where I would prefer Reddit over Lemmy. Big tech scrapes data from both places anyways, at least Reddit is safe.
You THINK it should be anonymous. I disagree so did Lemmy creators.
The Lemmy creators thought votes should be private, and didn’t respond meaningfully to people who tried to tell them that Lemmy votes are not private.
If they’re currently retconning it as “Lemmy votes are not private and never were,” then that’s a step in the right direction I guess, but the fatal flaw was ever following the Reddit model where votes are “supposed” to be private for real. Because as you note it is impossible to do in an ActivityPub system. A lot of people when this was first being discussed, pre-lemvotes, were objecting strongly to the idea of making votes public, because they liked pretending they were private and just not paying any attention to the fact that they weren’t. I think mbin still refuses to display downvotes for this (stupid) reason.
(Actually, Piefed did what I thought was a brilliant solution, creating new actors to send out votes with that were different from the comment actors, so that individual users could vote from Piefed and admins could check into it but the votes would not be trivial to associate with the users. IDK why they abandoned it but it seemed like a pretty clever way.)
I thought they consulted it with the users, and they decided that they should stay pseduo-private.
I’d dare say lemmy creators wouldn’t mind private votes, they chose not to display voting counts to normal users after all, but that’s not how the ActivityPub protocol is built and honestly can’t be built if you want federated votes.