Exactly, most NFTs are just a url to an image. You don't own that image and that image on the url could be changed even. Then there's an issue of privacy. Someone could mint an NFT with your personal data in the metadata and send it to your address. Now you've been doxxed and there's no way to get rid of that information. Just a lot of issues surrounding them at the moment.