Nostr DMs are events and everyone can see who is DMing who and when. Nip17 is solving some of this error.

But the biggest theat is they if the nsec is compromised, the DM’s are all open and considered leaked too.

It’s just bad all around