Why YSK: It appears several Lemmy Instances are flagged as suspicious and at least 1 instance intentionally using the name of ransomware. A couple of the big enterprise monitoring suites (Fortiguard, ZScaler) will flag your account and may end up with you being pulled into an office for an explanation, or worse.
TL;DR: Keep browsing to your local instance at work for now.
How? The client should only be talking to your home instance. Your home instance does all aggregation for you. Only Lemmy instances talk to each other and clients talk to one instance. That’s how federation works.
Non-textual content (media, and icons I believe) is still served from the other instance to prevent all federated instances from exploding in size.
Additionally, some browsers will preload/prefetch links to “improve the browsing experience”