We could also make all notes encrypted by default and allow for some accounts or notes to "go public" as an option. Probably easier than the other way around.

A public square with default encryption would be next-level because npubs could publish notes on any relay, but define precisely who can read them.