like the problem is not that DMs arent secure, the problem is that, and idk if this has changed recently, but if you DM someone not on a masto instance, it just shows up as a normal post to them, which they can boost/etc unknowingly. and yeah theres a warning, but like