It’s also easy to account spoof: I’m @PeteStrzok, but that doesn’t prevent someone from creating (on existing or new severs they make) @petestrzok@mastadan.social, @petestrzok@mstdn.social, etc.
Make sure you verify the account you’re following is in fact the person you think it is. An old article (would welcome an updated version):
https://www.malwarebytes.com/blog/news/2017/04/mastodon-risks/amp
None of this is meant to disparage Mastodon - just noting things to keep in mind.