This is the case. Your close groups (clientManagers) are passed a relay address type. At the moment it includes a way to get your public IP but will not at release. So your address can be considered scrubbed at the relay node. It means then nobody but a relay knows your IP but then it does not know what you are doing. So it works out very well.
I should say at the moment (in testing) we use the real local IP as the identifier, but will not in release (you can see in the code if you look at routing/ClientAddress struct but you will see where that will be a hash (irreversible).
I should also say for GET the ClientManager is not involved and requests go directly to the DataManagers of the data, so it’s pretty secure.