No, they are not: https://www.youtube.com/watch?v=PWKd9aoZ-Cg They are just an extremely hard problem to solve. Especially on the Nostr protocol. But I agree with @NVK that clients should disable them until they are fixed. @JeffG gives us mortals hope, though.
NVK has zero credibility at this point waving around trademark registrations assuming that people don't know that you can't trademark a name i am mere mortal, and i think you are wrong nearest to working DMs on nostr right now is OxChat and hell if someone were to pay me to actually build stuff for nostr instead of me having to beg to VC adjacent devs trying to do social networks with shitcoin blockchains it would have been fixed about 3 months ago
also, what the fuck auth, nip-42, it's right there relay can simply refuse to send out DM events to people who aren't authed to an npub in the messages, fucks sake is this rocket science or something?
You are welcome to develop a solution. Funding is available. If you don't need it, that is even better.
i don't need funding from people who are too retarded to understand the basic principle that markets allow people to discriminate against untrustworthry vendors, and who idealise p2p network solutions in a real world where such things are impossible because of all the rentseekers holding ipv4 address ranges, who also prefer to force people into a relay architecture, aka "centralised" distributed database applications, to track them and inject bullshit into their media feed like a good old television really, if i were to guess, the average nostr dev IQ is about 130, and i'm a 150, but i have ZERO tolerance for worshiping heroes or any of that retarded cult shit
there is some really spooky superstition among the in-group of nostr developers about cryptography decryption should not require permission at all, for one thing and authenticating to a relay you just sent 50 reqs that all contain your NPUB should not be considered doxxing yourself these two facts are humongous pain points for users and you idiots seem to literally not understand the technology you are using
"oh but you can't trust the relays" yes but you can choose them it's unbearably retarded how the nostr elite devs are about this shit oh we must have double ratchet, oh we must have MLS, oh we can't do P2P so it's leaking metadata fucks sake like anything else isn't fucking that shit up anyway?