developers are attack vectors - if you can id a dev to an app or service, you can nail them or even just make their life miserable enough to stop pushing the lead. 

The protocol is fine; should always be as long as we have good actor relays and clients.  But the devs can be attacked if they get to "big"

and it may not even be governments; fucking Meta-boy Zuck will get nostr:npub1ln4eae24r7dcq2cmlv9v5srhwcpfkjupuxs7fv72pd52kgrse5dqhh4uw8 into a triangle choke hold - whatchumean FBI, he'll deal with it himself https://image.nostr.build/a505722799cfd0f991722b46fbc6dd0d82dc407f8e76073593bf57721b473b7e.jpg