NOSTR doesnt solve for limiting transfer of identity.
It's okay for bitcoin, because transfer is the whole point, but whats stopping someone from selling their nsec to someone else, or sharing its credentials?
This forces some use cases into asking for names, pics, and other KYCish info.