Well, yes. But you reduce the attack surface most by turing off nostr. Not by turning off the useful tried and tested parts. You gain the full utility by turning on all. The attack surface of nostr despited being less than 0.001% of the web, is disproportionately high.