The more software you are running on a computer, the larger your attack surface, generally speaking.

Reply to this note

Please Login to reply.

Discussion

Well, yes. But you reduce the attack surface most by turing off nostr. Not by turning off the useful tried and tested parts. You gain the full utility by turning on all. The attack surface of nostr despited being less than 0.001% of the web, is disproportionately high.

Because it hasn't been tested as much?

Partly that. There is decades of maturity, economies of scale, ecosystem. But the web is a read only space by default, which is easier to manage. Relays by nature accept events and relay them to others, which is more of a challenge.