I know everything I say is public, and with nostr that is actually the entire point - to avoid being censored, not to be private. But yes intel agencies could be hacking us through our sloppily developed nostr software. I mostly just presume they already have access to everything and don't trust computers with true secrets. I use a SeedSigner for the only secret I need to keep secret. Then I also develop things as secure as I can, just to be the best I can, in the face of difficult odds.