That's also true.

Truth Social can just do what Gab did and provide a password-protected file in a public self-hosted git repository and they will be compliant.