One downside of Nostr is you have to assume your DMs will all be public one day. Encryption is not forward secure and we learned with PGP what happens when users copy & paste key strings :/