I made a patch to prevent access to private toots and direct toots from the mastodon admin panel ; narrowing their exposition to only people who have a direct access to the database.
https://github.com/Aldarone/mastodon/commit/1dce88cbdf2bdc6cc1d159a63a32d4b1f480b4c7
DM and private can still be reported, and only reported DM and private will be visible in the report. This is necessary to prevent abusive behavior.
But still, no more risk of glancing around by admin and moderators. Only sysadmin will be able to do that with this patch.