right, and you the attacker could unfollow all accounts right away. maybe i can hack my way through the Nostr docs and see if I can figure out how to dump the following and followers pub keys.