JohnBNevin on Nostr: Do I understand this correctly that there is only vulnerability to eavesdropping in ...

Do I understand this correctly that there is only vulnerability to eavesdropping in realtime - so since the diffie-helmann ratchet isn't created on every msg / until a response, the the window for eavesdropping is as long as the time it will take to receive that response. Therefore in any context / setup where the individual must consider there is a chance of realtime eavesdropping, the overall risk factor is affected by the probability the needed response will come quickly? Or is it just necessary that the client implement different ratchet procedure (diffie-helmann on every msg) to detach risk profile from responsetime?