-Every zap is an undeclared taxable event
-There is unmoderated "content" that is widely sharable to nyms with no IP tracking (given a certain relay setup)
-Copyright infringement is rampant
-Unmoderated Market places on certain clients allow for a silk road 2.0 (it just generally isn't)
-Potential for whistle blowing from government sources from untraceable nyms.
I think those are plenty or rules broken, maybe your use of nostr is too white market to know.