Yeah, admins on your instance can read the entire conversation of both sides. Since it's all unencrypted there's probably a way to capture DMs sent between instances as well.