Are they not compromised or more likely easily compromised considering they don't even have the resources to secure and legally fight against government interferences?

Well, Diaspora* is open source and decentralized(somewhat anyway), so I think it would probably be difficult to compromise the majority of it. I'm not sure though. I suppose if a subtle error was submitted in a pull request(?)?

I suppose that any single pod could be compromised fairly easily, and some of the larger pods have a large number/portion of users, so just compromising some of the larger pods could be sufficient.

Also, iirc, Diaspora* has been said to have some security and privacy concerns,

But I thought it would be good to mention that there isn't really a single "Disapora*" which can be told to give up all the data for all users, because different users use different pods. (And I think a collection of pods can be somewhat isolated from the rest maybe? I'm not sure.)