As an aside, I get that signatures prevent relay manipulation of the data; but, what prevents client manipulation of what is presented to the user?
Maybe aggregated data is good enough if the underlying source reaction notes remain available to be spot-checked for signature verification.