Attackers can spy using public keys to see who is sending DMs to whom and the time. Although they wont know the content of messages

****Repeat they won't know the content of messages

Meaning they can only see the sender and receiver name