As someone who's had "experience with government compliance" all I can say is, developers, especially those with an significantly sized operation should have a longer term plan. Government compliance and regulation is not new, this act is, but this type of enforcement and checking is not exactly new.
For example state sales tax in the US and website accessibility compliance forced us to do IP-based geo-location of customers in the past. We were left with the choice, track users to the best of our ability, or risk getting sued into bankruptcy. We had other state-based compliance issues that added to this as well. Specifically compliance we simply couldn't do because the tools we used didn't support it.
Nostr is going to break a lot of rules in a lot of countries. As, an operator, as a developer, as a business, you absolutely MUST be prepared for government activity like this. These types of compliance acts should not take you by surprise. It does the community no good for you to say "oh damn that's crazy" then do nothing about it.
I know it's not easy, trust me I get it, please let this be encouragement to keep your eyes on the end goal and keep your ears to the ground. I don't want to see people get caught up in legal issues because they simply didn't take the time to pay attention. There are 1000 compliance issues you're probably already in violation of, but that's just the job.
Be ready, have some funds saved to pay for legal council for your business, and for you and your family. Don't forget that they will often cease bank funds during investigations even for civil one sometimes. Be prepared for that as well.