They can't see anything if they can't read out of the relay. So as long as you trust that the relay isn't trying to do metadata gathering and it's implemented AUTH, then you're covered.