I don’t know enough detail about ATproto, but I wonder if it’s technically possible to block access to posts without also blocking federation. From what I’ve heard the functionality is more modular than Activitypub (content indexing being a separate service from content hosting) so I wouldn’t be surprised if it wasn’t possible.