yeah, it's private if the relay is run by moderators and private as far as the moderaters control it but of course permitted users can broadcast events

that will probably be a ban-worthy offense though, and end further access, it's kinda rude thing to do really

on the other hand the way i had a dual listener relay set up with inbound from a reverse proxy and writing to it from the client as cache everything that my client was seeing was going to become visible without me enabling nip-42 and i hadn't written an actual ACL yet lol