>what about DDOS resistance? Does nostr have an advantage there?
I'm probably not qualified to talk about DDoS resistance, but my guess would be that yes, Nostr has an advantage because messages can be delivered via multiple relays so the network can self-heal if a particular relay gets attacked. However, hosted clients can also be attacked and people who use them are at risk.
>and do you know of any possible upgrades activitypub could do to make it more p2p and DDOS resistant?
One approach is to make instances smaller. Ideally, every person should run their own instance, and though this will never happen, we can push the network in that direction by developing more efficient software and making it easier to admin.
Another approach is known as "nomadic identity". This is domain-independent key-based identity which allows you to move from one server to another, even if your current server is down.