I need to read more about Nostr and test some of my theories…

It claims to be censorship resistant. But it seems like to me someone could modify relay source code to incorporate censorship. Don’t get me wrong i like it and it’s great but i wonder exactly what measures are in place to block bad or suspicious relays. Is simple trust through a relay whitelist enough to stop a potential problem?