Sometimes the lemmy frontend also changes the post that you're reading atm, but as far as we know it's not a security risk at the moment. It's just shown, you can't act as that user or post.

tl;dl: bug