Double encryption could be used for regular DMs as well. The only metadata being leaked is that the receiver received *something* from *someone*. Much more privacy than it has now.