I remember when politicians said: We are building socialism, this is not it, but one day. Farmers had to gave up land, and ownership of animals was transferred to local co-operatives, a Stalinist collectivization. That shit brought Stasi to life, 5 year plan and central planning.

AFAIK the bank account number can fully KYC you as per assumption the bank already has your passport so with one transaction you "validate your identity".

Same threat is in play when cross-border CBDC is implemented. I can't think about a scenario when I would be OK with a random state and random person accessing my financial data and nobody should be OK with this. Risk outweighs convenience.

Does it checks if the palm is connected to a living person?

Revoke needs access to private key like pgp does. If subkeys were used and the original private key stored offline you could create a revocation request. I don't know if this is on roadmap.

You should use Nostr via Tor all the time as the relay operator should not be trusted.

Did it also tell it has a token? :D