Correct. What can be done will be done, that’s why I worried for a moment that they “snuck through” somehow, but it was just invisible tags.
@damus also does not do validation of filters yet, so relays can return any notes they want and inject it into your feed, along with inserting fake notes. NostrDB will fix this.