I was thinking about this the other day. Someone could scan kind 10000 events (Mute List / NIP-51) across relays,  filter the results for a certain pubkey,  extract the respective event authors and Bob's your uncle. There’s still an encrypted "private" mute list stored in ".content", but I guess that extracting the list of people publicly muting someone with a 20 line script is already a good start.