Just released 2026.2.26.14 which has a privacy mode you can enable, it requires to explicitly whitelist a domain before it injects window.nostr. Thanks again!