It’s sent to all servers where there is at least one user who should be able to see it. And then that server is trusted to only actually show it to the users who are supposed to see it.

In this case, Pixelfed is messing up by showing it to all users who tried to follow a hidden profile, as long as at least one Pixelfed user has been approved to view the profile.