i think the lesson to learn here is:

if you post something on the fediverse with a tag other than "public" assume it can easily be made "public." there's not much at all enforcing a direct message as private other than a flag indicating that "this message is supposed to be private."