This should have 4 settings:

• Public (no restrictions)
• Restricted public preview (only display content from local users publicly)
• Restricted public preview + no media (only display content from local users publicly, don't display remote media at all)
• Lockdown (Disables all calls to public api endpoints except the auth ones and instance metadata)