Same rules apply to nostr. Even the core devs track IPs and send them to the bad guys without consent. So nostr is probably more dangerous than legacy platforms which have certain protections.