The most difficult challenge is the security trade-off: for open-source software, which approach offers greater security—trusting your private/public keys to it or keeping sole control? Which option will make more money? Or to put it another way: What exactly is Nostr for its users?