she's right you know... they are public
something i wish the rockstar devs of nostr would finna grasp - DMs are not public, application specific data is not public, stop FUCKNIG BLASTRING IT
and start having some notion of the distinction, ffs, man, they don't even get why authentication matters, yeah, this is a next step on from it so i'm not gonna hold my breath... instead i'm building better solutions that actually understand the fucking semantics of this system