Nostr does need moderation. Relays haven’t done anything …

Applications follow the protocol. The relay select what they store and send. That's where "moderation happens. This isn't hard to understand.