Is there anything preventing the NWS relay from doing a MITM attack? I guess you could take the result from curl and check the nostr signature, but curl alone is unsafe right?