Tin foil hat on.

My theory on ReplyGuy is that it’s one of the well known nostr / relay devs who is stress testing the protocol through this obvious vulnerability. They won’t stop until we fix it, for the sake of hardening nostr. They likely run a relay service too. Paid perhaps.