Allowing anybody to comment on your posts is a basic platform security issue and independent of ActivityPub or any other protocol. We've provided comment controls to all of our members since (checks... July 2010) across a number of different protocol stacks and federation bridges - including Twitter and ActivityPub.
If you're seeing this reply, you've got much bigger problems than bullying.