Its not an illusion. Mastodon is NOT intended for secure communications, at all.
The organisational privacy of DMs is not intended for security, but merely the privacy of "whispering in a restaurant."
It would be an illusion if Mastodon claimed security. It does not.