Snapshots of your Note ID carries all the data with it—including pfp. How much do you trust these random strangers on the internet who run relays?

apparently enough to use this protocol everyday, though, not much trust in general