because it's cheap and easy?! nostr is technically very simple including every important relay is publicly known and paid for by volunteer operators and neither permissionless nor private. ethical hackers might just do that to point out how weak the system currently is to provoke evolution.