It's hard to control what gets off a relay, considering the events are discrete, self-contained packets. So more effort should be put into controlling what gets in.

If you really want to control what gets off, you'd need to serve decomposed notes to a trusting client to avoid actual signed notes from escaping.

And if you're serving private or monetized media it would need to be copy protected on the client.