Let's say this is all happening on 1 relay. What can Observers see if they don't have READ access on that relay?
They can't see anything if they can't read out of the relay. So as long as you trust that the relay isn't trying to do metadata gathering and it's implemented AUTH, then you're covered.
Very well 👌