Yes, tags are encrypted in the payload. The idea is to create a view with something like "req -k 33301 wss://chronicle.dtonon.com -t #manent#todo#urgent" and it shows only those notes. Of course it's not a real req, the tags should be filtered after the actual fetch. I don't know if/how grimoire handles cached events, so I don't even know if that's possible.