Currently if you have a locked/private account, the accounts you follow and the accounts that follows you are displayed publicly.
I believe this shouldn't be the default behaviour for such accounts.
I think in the current implementation, Toot is made to be private to followers so that it is not visible except for the followers.
Therefore, special implementation is required to make the follower private because the followers can also be seen by users who are not logged in.
Seems most discussion of this is happening on #6901.
Most helpful comment
Seems most discussion of this is happening on #6901.