So, the communication between relays can't be intercepted and read, right?
Couldn't a relay-group client just encrypt all note content, by default, so that only the people sharing that relay can read it? That way, even if it gets out, people just see gobbledygook?