Did you know that NIP-17 was designed to keep metadata private even if devs make mistakes in their apps? 

Designing a DM protocol where you control the server and app on a single codebase is very different than designing something anyone can code flawlessly from scratch.