Correct. It just transfers through Tor instead of the regular web. Everybody else can see it as soon as it reaches any open web relay.
So Amethyst on TOR will only relay to a relay on TOR, not on naked web? And then we should hope that this relay also has a naked web address so that other clients can download the note?