All true, but I think you overestimate how many Nostr-spammers have that skillset.

People with that skillset have much more profitable things to do with their time.


Threat modelling needs to be step 1.