They don’t even need to go through a middle third party instance, they just have to have a ghost instance that nobody know it belongs to them and this one will federate with everybody else

For example if you go to FMHY federated instances, there is one called evil.social , that could be from Meta or Google or NSA… nobody knows