this would require every user to run a relay, no? and still have to trust hub relays to delete everything.