Thanks. We understand this trade-off in NIP-17. In our view, the fact that NIP-17’s end-to-end encryption lacks forward secrecy and post-compromise security (PCS) is a more serious trade-off. We recognize that DMs and standalone chat apps are different applications, and therefore their choices of encryption protocols can also differ.