also, who the FUCK thought 64kb was a reasonable maximal size for an encrypted blob... exactly
the number of ways that nip-44 encryption is a joke is a list about 10 items long at least. you don't want me to remind you, also, that the giftwraps have to be sent to the destination and also to yourself. which means that though it's very slightly obfuscated, metadata is still there. especially if both halves get on the same relay, their timestamp is almost certainly going to be the same timestamp. still narrows down pretty far even if the relay had a few thousand regular users, the analysis to identify chat partners would not take that long.
that's why. auth. that's why synchronous via bunker style rendezvous connection to enable inboxes IN clients.