Your profile and notes is open to the world and internet. ANYONE can comment on any notes you make. They don't even need to follow you in order to write comments. This is how Nostr works. 

I think it's dumb because it's easy for anyone to put spam in your comments and notes. They should have to request a follow before they can interact with your profile.