Nothing is really private once it's not a secret.
And whatever standard for privacy is supposed to be achieved can even be achieved today by the users themselves by using Tor + nostr.
But using that as an excuse to call nostr not private, where it's probably one of the very few beacons for privacy while the rest of the world is a complete shitshow, is very disingenuous to nostr.
