Everything on Nostr is a signed event… writing a note, liking something (kind 7), changing your relay list, adding/removing a follow, etc. you just didn’t realize your client was signing everything on your behalf with your nsec until now