So I have been thinking lately, and I'm pretty confident at this point that a relatively private overlay protocol can be done on top of Nostr for people in dangerous situations. It would not be cleanly interoperable with conventional users.