We can say the same thing about Twitter or any large web application 😁 If you want to have privacy, use a VPN or Tor.
yes, but as mentioned it's a very different set of tradeoffs with much easier "doxxing" by randos via relays or malicious media embeds. As bad as X is, it's at least not exposing IP to anyone with basic sysadmin skills.
A rouge sysadmin can exist anywhere, but I'll agree that on Nostr it's easier to be exposed because your footprint is spread out, tis the nature of decentralization.