I'm sure the relay operator can still see them (encrypted) and could still infer a lot of metadata by watching the DM notes on the relay though, no?
Sure. The relay can see everything you do. All your messages, all your filters, everything you send and receive. Make sure you trust the relays you are using with that information.