Especially one that is a money transmitter

I'm saying even if they personally coordinated an attack on Nostr users, they still managed to create a decent framework. That's worth mentioning when our options are limited.

Plenty of crapware on Nostr wants to unencrypt my dm's just to visit the main page of their website. I don't see it as any different but I don't shit on every project that decides to implement an experimental and open protocol "incorrectly".

If it's proven to be a coordinated attack by the developers themselves then I would think less of them. At this time I don't have reason to suspect them considering their reasonable response.

They have just as much obligation to provide a secure service as any user has to choose them for money transmission purposes or custody of Bitcoin. We've mostly all tried multiple wallets and we're all pretty aware of the risk.

Were you affected? I just don't understand the "never come back" part. Why so serious?