weev on Nostr: Nostr app developers will always have an incentive to steal keys. People have done it ...

Nostr app developers will always have an incentive to steal keys. People have done it a lot already. Stealing Lightning zaps by specifying a new LN address is just as much of a financial incentive as stealing on-chain, as well as the pushing of ads and roping people into coin scams and other fraud. The incentive to steal keys will always be there, and will only grow as more people adopt Nostr.

That being said, there is a reasonable level of concern here, but the solution is not to disallow on-chain zaps. It is to allow me to specify an alternative Bitcoin address in my profile to allow on-chain zaps to go to. I will not use LN addresses, as they are centralized via the domain name system. By using LN addresses, I am giving authority to the domain name system, which is controlled by the state, to allow me to continue to receive funds. Domain names are state-issued identities and state-issued identities are immoral. I don’t wish to involve them in any way in any financial transaction.