My tenuous understanding from an article I read about the AT protocol but barely remember is that it can't be fully decentralized. I think you have to use bluesky for user authentication. And I think it said the hosting hardware requirements would be significant to the point where it's not very feisable. I welcome corrections/clarifications.
Point is, assuming that's reasonably correct, true decentralization isn't possible. And by it's nature as a big corporate owned site, enshittification is inevitable.