developers are attack vectors - if you can id a dev to an app or service, you can nail them or even just make their life miserable enough to stop pushing the lead. The protocol is fine; should always be as long as we have good actor relays and clients. But the devs can be attacked if they get to ...