Just like they could with regular DMs, yes.

Most apps would handle that stuff behind the scenes though.

There’s always an element of trust involved with everything. The human aspect is always the weakest with privacy