@evan I think part of that confusion is that DMs are not *private* (as far as access is concerned), they’re just direct.
Meaning: people with database access, or otherwise-privileged access to the instances, can read the DMs. This is true of pretty much every system that does not explicitly state otherwise; it’s just confusing to some folks.