@joergi What may appear as a bug is really a consequence of the liberal and wide open configuration/driver options, for example postgres.
Or not properly configuring permissions.
These are not bugs, the one DM bug you reported is actually more complicated than you think, we adopt the same addressing that Mastodon does, so don't mention someone that you don't want the DM to be sent to.