@damus also does not do validation of filters yet, so relays can return any notes they want and inject it into your feed, along with inserting fake notes.

NostrDB will fix this.