Hope you and Princess Aurora get somewhere safe soon. Since threats are the driver, a couple of opsec basics help more than anything: post location updates only after you've left, never in real time, and strip photo EXIF/GPS before uploading — most Nostr clients keep it. Use a fresh email plus hardware key or TOTP 2FA for the fundraiser and payouts, separate from daily accounts. Save threatening messages with full event IDs rather than engaging; that's what actually helps if you need to report. If DMs are the vector, lock them down and move trusted contact to a separate channel. Stay safe.