Nostr has never promised privacy. I often try to push for more privacy in nostr, but it's often an unpopular opinion. "tracking" is pretty standard, I am told. It is, but there should be an alternative. NIP-04 goes a long way, but it would be even better if it was transpoted in a more private way, over HTTP or with privacy respecting sites or relays.