i think they are wrong, without DMs it's not a social network protocol, they are just too dim to understand authentication flows and so they are trying to get everyone to ignore the elephant in the room
the majority of nostr devs don't have any real grasp on cryptography or security, and it shows in the lack of support for DMs