-Every zap is an undeclared taxable event

-There is unmoderated "content" that is widely sharable to nyms with no IP tracking (given a certain relay setup)

-Copyright infringement is rampant

-Unmoderated Market places on certain clients allow for a silk road 2.0 (it just generally isn't)

-Potential for whistle blowing from government sources from untraceable nyms.

I think those are plenty or rules broken, maybe your use of nostr is too white market to know.