What are some of the pitfalls that led to a centralised web being built on top of the deecentralised internet protocol?

I'm thinking a lot about this in terms of building on top of NOSTR and where things could go wrong.