One I don't think we covered is the Nexus ships with a hardcoded default moderation key that can de-index posts, profiles, and files.
Configurable for self-hosters, sure, but pubky.app users are on Synonym's Nexus with Synonym's key and no opt-out or visibility.
How do you square a default centralized de-indexing authority with the censorship-resistance framing? Genuinely curious about the design intent here.

