The question is not about nostr, if it's public it will eventually be exploited