Once damus switches to a multiplexing local relay the outbox model becomes much more attractive: all notes and filters are validated by default. The network code is only responsible for dumping data into nostrdb, the actual filters are matched locally. This removes any concerns of malicious relays I might have had in the outbox model. nostr:note19kdj9n360mnvckw9c48870576jffnx9ts379gs03q4cz0k7tdrms7ng52m