A community is just NIP-17 with all members sharing the same nsec. Change my mind :)

feels stupid how can you kick someone out?

Change the nsec so he can't encrypt or decrypt new messages; do this if the community is small. Otherwise, ask clients to ignore his messages, though they'd have to waste compute to decrypt the message and check who the sender is. Anyway, he could just use a new public key and spam the community, then users' batteries would get hot from the encryption. IDK, maybe you change the nsec but he'd know it if the community is public. Maybe it's for small communities and not big public ones? IDK. @JSKitty is this correct?

that can't be right, it's too broken