I'm not sure anyone is arguing that a business can't profit off of a nostr client, or even mine users data.

I think the issue is that this wasn't clearly disclosed, and people are likely using it without this knowledge.

Open protocols are for everyone.

But there's nothing wrong with disclosure, either.