Are all clients the same? The android one too?
And the web ones?
If that’s the state of Nostr, then you shouldn’t use it on mobile.
I always said Nostr relays were trusted third parties — and the trust model is essentially the same as with existing centralized platforms.
But not even checking sigs removes the one thing Nostr improved.
If you don’t validate sigs you’re much better off just using Twitter.