Two features I believe nostr should have:

1. Private message metdata must be private.

2. The user must have the final say in deleting anything they've signed.