I seem to remember reading about an earlier attempt to do this that brought down twitter; The twitter server was attempting to follow the tweet chain and didn't have mitigations for this. Anyone have that link?
Object ID Prediction is a classic class of security attack, but thankfully with their data model it doesn't much matter.
It does matter, as it could be used to figure out user growth. Tweets and users now use snowflake IDs which provide increasing but non-sequential IDs which also encode creation time.
The point is that the submission URL is the actual ID of the post. Similarly to if I'd post a link to this comment without having the ability to edit. I would need to know the ID of the post in advance.
Object ID Prediction is a classic class of security attack, but thankfully with their data model it doesn't much matter.