This risk is further reduced if relays start putting DMs behind AUTH too, isn’t it?