Security: Imported follow lists bypass follow request approval for locked accounts.
If I import a follow list that contains a specific username, I can follow someone and receive their posts without them ever accepting the follow request.
This has just been found on my instance and resulted in one particular user being really scared and annoyed.