This is precisely why solutions such as SimpleX or Keet are worse compared to Nostr DMs.
Discussion
At the cost of security. Nostr DMs have no forward secrecy (same nsec/npubs used in each key exchange). Take that together with the fact that people tend to trust clients way too much with their nsec and you have a disaster on your hands should a client be malicious.