Most relays are hosted on AWS or similar clouds. You can rent a few GPUs or cheap VPS bots and DDoS the major ones all day. There’s no serious uptime guarantee, no real resistance infrastructure yet. People claiming #nostr is “safe” from what’s happening with X are delusional.
It’s not censorship-resistant just because it can be. Right now, it’s fragile - dependent on centralized hosts, volunteer ops, and duct-taped relays.