I did a little search about FOSS nostr client on github and I found Nostrid that runs on browser and can even be installed locally. So there is no risk to be censored. For the tracking problem it can be reduced in many ways using basically the same methods used in private bitcoin transactions