definitely there could be a request filter for note size and a response that tells you the note IDs and the authors but not the contents

then a separate request for contents from authors that you trust or whatever your client decides that it wants to get

just getting a list of note IDs that you might be interested in but maybe contain spam or giant images would be a pretty cool response

could even be the same messages just with the content truncated or missing and a flag to let you know that it was truncated or missing