See it as one community/app on that protocol. And it's fine.
Nostr apps/communities should be able to also pick this (and even fiat paymeents, email, Google, etc...) as whitelist options.
This is not at the protocol level. And I like many things about the protocol tbh.
I dislike many things about this app tho. The white-listing isn't even in my top-three.
