For the privacy issue, i think it has became secondary issue since the inception. Because, at first, nostr design is mainly focused on censorship-resistance protocol.

"The simplest open protocol that is able to create a censorship-resistant global "social" network once and for all." - Nostr Github

But, truly agree that privacy issue should also be addressed properly. :)