nostr differs from how similar services on the internet work in that the data is both much public and distributed across servers run by different people. Any one of those server operators could potentially try to violate user privacy.
It's not really singling out nostr, just stating facts.