Tor + private nostr relay + pgp? 

 0xchat uses a similar system to Signal's sealed sender for the encryption, but this is changing. Last I heard all of the Nostr client devs were trying to upgrade to a v3 once it passes an audit.  Once they do so, there will be a big question of which relays will support this, which has metadata questions.

So we have to see on these changes