Nostr offloads security from the server to the user. This means if one user gets pwned they lose that account forever, but leaking the DMs of an entire server is impossible.