He has a habit of demonstrating his points about security and spam and the like so that they can't be ignored and the issues have to get fixed. It is all for the good of nostr of course, but can be a tad annoying when you are working on something else.

There is also a repo where people complain about compatibility issues between nostr apps: https://github.com/nostrability/nostrability

Speaking of, I was about to write a bot that requests connection to people's nsec bunkers to see how many people will authorize their private keys to sign my events, not realizing what is going on. Could be fun!