Yes, and I think this is especially a risk with something like nostr. When it comes to security and privacy, the worst implementation in use sets the standard. Luckily, there's limited damage you can do to users on nostr.