Maybe we should just use AUTH on group relays to create exclusivity, remove broadcasting, and abandon the privacy promise of encryption? Someone malicious could just screen-shot stuff or copy-paste the raw json, anyhow.