If a user's goal is to hide their location then Nostr is not a great choice of protocol. Every relay connection requires the relay to know the user's IP, and that's mandated by the protocol itself, regardless of what the relay does or does not do with this info. And the user needs multiple relays, often random, often out of their control. All relays use DNS relying on certificate authorities and public registrars, registries.
Then add in all the media servers (for a single not you need the relay and the media server, and maybe the mirrors too). Then add in the CDN serving the media itself. It's basically standing on a hill and shouting in every direction.
And VPNs don't help much. Most VPN use is trivial to detect now (especially on phones), and VPNs cut both ways, a user could be out of the UK and get a UK VPN and now the relay or media server has to treat them like they're in the UK, with appropriate guardrails. So the obligation on Nostr relays, media servers, everything, is very heavy, regardless of VPNs
Basically if location privacy is a major concern then a user would not choose Nostr, they'd choose something else.
