ActivityPub

The wording is pretty wild to me:

is required to implement appropriate technical and organisational security measures in order to prevent advertisements published there and containing sensitive data, in terms of Article 9(1) of that regulation, from being copied and unlawfully published on other websites.

Whatever can be accessed can be copied, there is nothing bar not publishing that can prevent it. Except if they call a pretty please in TOS an appropriate measure