Hubzilla and the zot protocol are a really promising alternative to ActivityPub, just not as much traction.

In what way are those better? Don’t they still suffer from the privacy problems that come with federation?

Yes, the issue is that Lemmy does not even attempt to allow you to delete the image. There is no control for the user to do this. It's literally not possible.