Moderation should always be client side. Server side should not be able to interfere or even read public content

Yup. I don't know if I agree re public content, but perhaps private messages should be encrypted, client side, before sending? That issue is one that bothers me about Mastodon.