Yeah, the attack vector is much much larger than a centralized social platform.
Instead of Facebook or Twitter knowing everything about you (which at least they protect).
Here any rando could figure out a lot of things.
Guess I should really not use nostr without a vpn. Though now sure how much that helps.
Though VPNs somehow still leak a lot of information.