Yeah, the attack vector is much much larger than a centralized social platform. 

Instead of Facebook or Twitter knowing everything about you (which at least they protect). 

Here any rando could figure out a lot of things. 

Guess I should really not use nostr without a vpn. Though now sure how much that helps. 

Though VPNs somehow still leak a lot of information.