It’s not sufficient though, maybe you whitelist a pubkey based on a topic but they only write 5% of the time on that topic
And clients are not good at segregating content, so relays need more powerful tools than just AUTH imo.
Discussion
It depends on if you want topic based or people based groups, but yeah