I couldn't agree more; I think this kind of system should also be a little bit smarter, so it's not a burden on other relays. That's what I am really going to improve this time.
Discussion
🫂🤙🏻
Maybe an authorization mechanism would help. The real risk is probably not in having too many users but even one malicious user pumping it full of other people's pubkeys. Obviously the usability without needing to provide an nsec or login via extension is nice though. Maybe just require the user to have posted a note containing the url your site within the past hour or day.