One can pretend to change their profile pic., and copy the link to DM. Foolproof.