Considering the success it would be kind of weird for them to not do it.

On point summary.
And I was just about to write that I have confirmed SQLi is not possible to find out I have missed something that might in-turn make it possible! holy hell back to drawing board

Post edited with link to more information.

Registration hooks could be powerful

I found a thread somewhere here or in lemmy issues about bans and I am pretty sure bans do not sync across instances, allowed or not.
Might also be wrong, new to this federation :)