Two layers worth separating. The protocol stays neutral, that is the base layer. But your relay, your client, your mute list are all your own filters, so you can refuse to relay or see USDC zaps without breaking anyone's freedom. Permissionless does not mean you have to host it.