We don’t know yet the full answer to that but I’d say being “opt in” without any sort of prompt ( especially when every other fucking Meta feature is “opt out” ), or having unidirectional federation would qualify as malicious.