A robust client could just implement Simplex for DMs and call it a day Could encrypt a status event with a 25th word/passphrase so you can recover your DMs but a leaked nprv isn’t enough to get at them