I think there's acknowledgement of that, but users are aware from what I can see that nothing they post is private on Nostr. I don't see people using their real names and there's a tendency to use some desktop clients (phones are registered to real IDs). Actually a big concern has been getting relay access without VPNs. Technically VPNs are illegal as well and make content choppy. Having said that, user privacy is a huge concern and a slipup would be dangerous, yes. There is room to do more work educating people on that for sure. That said, it's a lot harder to tie down who you are from a private key - which is why a lot of Chinese people still transact with BTC/USDT despite the risk. Versus X or any other apps tend to need some way to communicate with you ex: email that can tie you down.