IMHO on the current Internet protocol stack, Tor, I2P or something like that (but not ordinary VPN) is necessary to hide one's IP address. Regardless if we are talking about Nostr or any other service.

Something like GNUNet maybe solve that in the future if completed and adopted en masse, but it is not likely.