I think you are kind of right. But if you build p2p people will eventually decide that it sucks and create discoverable "peers" that are functionally relays. Its just a question of what you'd rather fight with. Do you want to forever fight with opening permissions on something too restricted or forever try to lock down and filter something too permissive. I think we should try both.