Once you hit publish, it's public and anyone and everyone can save a copy and distribute it. If you don't like that, don't hit publish.
It was already wayyy too complex. And this? Yeah, they (you? sorry) really need to just give it up.
Permissioned / private data is non negotiable for any social media tech trying to gain mass adoption.
The entire point of services like Bluesky and Twitter is broadcasting your activity out to the internet for anyone to see (which of, course, is technically little-or-no different from "grab")
You seem rather confused. I do not work for Bluesky. I am an independent developer building completely separate applications on ATProto.
Also, ATProto can be much more than social media tech, more like a plug-n-play distributed system