> ActivityPub doesn't offer a way to control data once it has left the instance

Nothing offers a way to control data once you post it publicly though? You could host a public mastodon with federation off and the amount of data exposed is not really going to be different than if you federate.