Yes, a malicious relay can do that, but you can spin up a new ephemeral pubkey and write with it, the result would be the same and you cannot correlate nothing