@firstname.lastname@example.org I'd say going out with the base assumption everything not follower only is most definitely public and known to everyone possibly into the far future even if deleted is reasonable, I did the same on Twitter. Follower only is... at least safe-er, if combined with AUTHORIZED_FETCH and assuming none of your followers or their instances are bad actors, I think. Still, think before you type is a sensible starting point online, boring as it is.
The social network of the future: No ads, no corporate surveillance, ethical design, and decentralization! Own your data with Mastodon!