You're implementing "request to delete" π€
that's right, you have to trust the relay is not keeping a copy. also a bunch of clients could have downloaded the event and can broadcast it anytime.