I agree with you on principle, but perspective matters. If you've been embroiled in or heard about instance drama involving an admin reading DMs, it will feel more personal and more pressing than vague corporate data misuse, even if the scale of the harm is objectively bigger in the latter case.