I think there is a greater risk for nostr clients, since people can inject this stuff into your feed. Mail clients have the same issue and have “dont load images” for this reason
Discussion
YES pls imagine scenarios-
Facebook: it got my everything but it's fine cuz I ain't see any bot publicizing my shit even if there was, Zuckerberg may have deleted it.
nostr: client & relay doing all non-kyc things right & I'm happy shitposting but one day my real IP and activity is everywhere on the feed and no one can do anything.
🤷
Maybe nostr needs a vpn service. can we team up with mulvad? I would pay.
Oh wait, everyone can just run their own mulvad like big kids?
nostr:note1tlerwxw7mls8s4llxvw55ua38h9gea0les5pc85h7vmzk86gaqvsk9fgt0