NIP-17 only hides the sender ID , not the recipient ID. External observers can still see that a certain person is receiving messages. A better approach is to decouple the sending address and the receiving address from the ID, and continuously rotate both of them. Addresses and IDs serve different purposes and should not be conflated. An ID should not be used as an address.