This is not a "needs to improve" this is "the Dev has never made a private messaging apo and is jut winging it and making false promises"
Making a private messenger is deceptively hard. 90% fall in the exact same issues because they get confident. So unless you really know and have done a ton of research, don't do it