Comment by beefhash

I think that's backwards. You cannot assume that a "private" message is actually private unless end-to-end encryption is advertised. You still cannot safely assume so unless you've checked the code yourself. Privacy is never the default.

Hence the move to call things "direct" messages, rather than "private" as it used to be.