I think the account is more of a warning for people than a nefarious thing. It’s bringing to light the fact that DM senders and their recipients’ handles are not private.