Bluesky uses a federation protocol, federated social media sends all content posted to the site in plaintext to its backend protocol. So they could make a private option in the official ui, but third party ui's could bypass that. It's literally not possible to change this.
