Remember just like anywhere else without end to end encryption, your DMs here are not private.

https://github.com/mastodon/mastodon/issues/18079

Distributed servers (/instances) can make for interesting times (eg, potentially no more record of your toots/followings/followers) should your server go down. Server resilience against hostile actors is case-by-case.