Could GDPR considerations be contributing to a relunctancy to adopt nostr? With the way data is (not) restricted, I expect building on it brings much greater liability.