So it turns out the geniuses over at Bluesky trust the client app to fetch, and honestly report, webpage metadata for preview cards, so with a little tinkering in the debug tools you can post whatever news stories you like and they look exactly the same as real ones.
@ikeacurtains @dat it could, but it sounds like bluesky don't want to do that kind of solution because "the server" could be anyone. you know, because bluesky is """decentralised"""