Looks like overworked devs did some pretty bad practice with certs, not as big of a deal as people are making it out to be. https://hackaday.com/2024/03/01/this-week-in-security-forksquatting-rustdesk-and-mms/

Windows is packed full of ads and ‘suggested content’ now. It’s really awful.

Private social media is your best bet, but if you don’t want your content scraped, the only surefire way is not to post it online. But realistically it’s a risk vs reward scenario, not a black and white one. There are places you could post content and have it be less likely to be scraped, but once it’s out there there’s always the chance.