I feel like defederating is a good short term solution, but the events described with XMPP could have happened in any number of ways.

The real focus should be on how to make ActivityPub robust enough to prevent the events from the article from happening again.