Nostr can be extremely dangerous for people not using VPNs/Tor, because they loads images from any URL.
So someone who needs to capture the IP of someone, can simply link to the victim an image-powered "IP grabber/logger" to get the IP of the victim.