I don't know who needs to hear this, but with all the new sign-ups:
DMs here are not end-to-end encrypted (yet), and BlueSky employees *could* read them, or any attacker that gains access to the BlueSky servers.
Treat DMs as a chat in a pub. It's not meant to be heard by others, but could be!