I think the only thing worse than something not being private, is if the fact that it's not private is not common knowledge leading to tons of people thinking it's private.
Lemmy doesn't even show a list of what you the logged in user voted on. But it's trivial to use an external tool to see who voted on what regardless of whose account it is. I think obsecuring information like this does more harm than good, since a lot of people won't actively go out and research what kind of data in their Lemmy account is publicly accessible beyond the data they can see from the website itself.
It's been discussed before that there isn't an easy way to hide who voted for what on a federated platform while still having all the instances correctly count votes for everyone. Therefore, if actually making votes anonymous seems not to be viable, why not just make it public for everyone like Mastodon does? I don't think we should make them inbox items like on Mastodon, or at least not the same inbox as the rest of the notifications so votes don't drown them out. I think a dropdown on the content itself showing who voted on it and in which direction is probably enough. Also a tab on the user page showing a list of everything the user voted on, at least on the logged in user's own page (I mainly want this so I can keep track of what I voted on).
The comments below started me on a trail that led me to a relevant comment from a Lemmy dev:
https://lemmy.ml/comment/18256302
Wouldn’t it make more sense to either implement real vote privacy or just open the viewing window up for everyone equally?
Vote privacy can be tricky in an environment where every vote gets sent to thousands of instances and needs to be verified as legit via the ActivityPub protocol.
Piefed does a good job of this I think. If vote privacy is enabled, they create a second account that is used only for votes. Other instances see the votes and can validate them against the vote account but it's not tied to the actual user (except in their home server database).
A benefit of this is that the vote account for the user is always the same, so you can still track vote manipulation, and ban the vote account if needed.