I think you might be conflating the activity of instance admins that run Mastodon with the actual developers of Mastodon, which isn't fair. Similarly, the developers of Chrome shouldn't be held responsible if people use Chrome to browse CP and terrorist advocacy sites.