Another benefit of an "outbox model" is that it's asking only their relays about their notes (without auth) so still somewhat private.
Not entirely sure yet how to have a private relay fetch these without access to decrypt the list. Will have to think about this one, perhaps lists could be shared with other pubkeys.