Since kids can develop nostr clients using IA nobody can audit them. So the solution is a simple protocol and run your simple client. That is it.