I still find it completely unacceptable that Bluesky leaks DMs on signed out devices. I was still getting DM notifications on a phone that wasn't even signed in with the correct PDS/one that still exists. There's a real chance this really hurts someone.