Exactly. I also mentioned this in my phlog post (https://hoi.st/posts/2024-02-12-cosa-nostra.txt):
> Another huge problem is implementation bloat. I haven't been able to find a
> single Nostr client in plain C or Nim. The closest to that was Algia written
> in Go. Requiring EC cryptography, JSON *and* websockets to write a minimum
> viable client is just too much. Not to mention that even web-based clients
> are naturally heavy and don't work in non-JS browsers like Links or NetSurf.
> A lot of these clients also integrate "zap" functionality, which is a word
> for giving tips via... Bitcoin Lightning network. And on top of it all, to
> do zaps, they promote custodial (!) wallets which are implemented as browser
> extensions, as well as some extensions to store Nostr private keys... I lost
> count how many security antipatterns were involved in the implementation of
> all this.