When lemmy supports federation, what stops me from creating an instance that logs all user credentials? I don’t really see a solution to this problem.

Is there a document that explains behind technical details of lemmy?