Hey Jeff how come I can't message my friend on White Noise? It just spins forever

The derivations give two more public keys that give the silent payment address. That doesn’t reveal anything. If you do the scanning yourself, you’re fine. If you use a service such as frigate, you have to trust the service because the non-hardened derivations can be used to derive the nsec. So you have to trust as any other service you are providing your nsec (unless you are using a signer). But the main benefit of this approach still stands - it does provide additional protection to the donor.