wish you can have tailscale with the private dns option set on android, i don't like that i can only have dns filtering when i'm connected to tailscale
AP-style content federation would still be really neat functionality and I wonder if there being a protocol-level "who is this addressed to" field within records would get you most of the way there
PDS and relay subscriptions could easily have a filter for this