Sending a link from a client can be viewed by someone without a #nsec? This is happening with #nostr right?

That's a nice feature if so