What are you on about? We know it is secure because the relays are not trusted third parties.

Everything is public in nostr except DMs, which a e2ee. And everything is signed, so the relays can't do anything more than just not relay messages.