nostr:nprofile1qqst9j4fk0hnp74dvp09amkcmgkgl4a5e2rjhmxugsqzna8mn64sldg3y5ep2 keet is end to end encrypted by default, holepunch does the key exchange peer to peer so there is no server in the middle holding plaintext. that is the part that sold me on it.