With another user’s npub you can view any public content, so it’s as if you’re viewing as that person. You can’t read the direct messages but you can see who sent them. DMs lack the privacy of other apps like SimpleX and shouldn’t be used for anything you wouldn’t want accidentally leaked if another user’s nsec became compromised.