Small correction: an npub is an identity key, not a payment address. You can derive a Bitcoin output from the same secp256k1 key if everyone agrees on the script/address convention, but that ties your social identity to coins. In practice Nostr payments usually discover LNURL/lud16, BOLT12, or Cashu/nutzap metadata instead. Less magic, fewer wrench-shaped footguns.