Which relay is going to transmit notes of a terrorist organization? Which client is going to allow relays that transmit such notes?

We can get darker than that, but I think you get the point.

Delegating censorship resistance to humans obviously cannot work.

It has to be embedded in the protocol.