cloud fodder on Nostr: Do you have the same concerns with nip42 auth? And if so, how can a relay protect ...

Do you have the same concerns with nip42 auth? And if so, how can a relay protect these sensitive events if it doesn't know who your publishing key is? You could auth with a separate auth key but then the relay cannot help protect nip17 by filtering on tags. Maybe the even newer ratchet DM scheme may not require the extra protection? But if it does then it's a rabbithole all the way to exposing your publishing key relationship with the auth key and trusting whoever you're authing with not to be nefarious with a signed message or event..

For non DM stuff, the relay doesn't need to know what your publishing keys are, it can just accept valid events from any key once the connection has been authenticated.