In order for this to work we need identical, but different kinds for the community kinds. Prefix community kinds with 69. That way even if there is relay leak, they don't show in global outside of their context unless the user specifically makes that happen. This is not for privacy, this is for context. Eg an event at "Dan's house" should not show up in global event feeds like plektos by default.

Even then, the publicly sharing of some event can be deleted by a moderator running pyramid.

Then bodarc just has to add admin mod features, really simple .