it is possible if it is a protocol not a platform. Like there can be illegal stuff over http, there can be illegal stuff over nostr and a normal person can come across it. Actually way more likely on nostr because on web we have centralized https certs and dns which is used all the time to block cp and the like

It's funny when people first say "nostr is just a protocol and completely not subject to censorship" then "there is no way a new user would encounter bad stuff on nostr". pick one?