The only person that can scrape your words in DMs is the person you're talking to. DM content is encrypted. The act of sending the DMs is not. There is a NIP that 3 clients are using that solves this and makes everything truly private, but it's still being scrutinized and worked on.