DMs are encrypted but anyone can sign in with your Npub and see who you are DMing. Better off with Proton as it’s encrypted and secured by a password