You are right. Bad relays can definitely collect more and do more harm.
Discussion
Interesting, so it comes down to trusting good relays and avoiding bad ones? What do you look for in a good relay and what do you avoid to stay away from the bad?
That is really hard to say. I would assume that someone will eventually find out that the relay is probing you and requesting more than they need to, but there are no obvious red flags.