But there's also less of a reason for anyone with permission to read DMs @ Twitter to do so, possibly with logging for any audits into unauthorized access. For mastodon, chances are your instance is focused around some general interest and thus getting on an admin's bad side could mean abusing their power to extract personal information/DMs from your account.

The only real issue with this wrt Twitter is that such failure of their internal employee auth allows malicious attackers to access DMs as well: https://techcrunch.com/2020/07/22/twitter-admits-hackers-acc...

Insider attacks happened at twitter. State actors love to read DMs. https://en.wikipedia.org/wiki/Saudi_infiltration_of_Twitter

> But there's also less of a reason for anyone with permission to read DMs @ Twitter to do so, possibly with logging for any audits into unauthorized access.

https://www.telegraph.co.uk/news/2021/07/12/exclusive-extrac...

I'd expect there to be many Facebookers who weren't caught, and I'd expect the same to be true of Twitter.

People pay employees and contractors at social media companies to delve into others' accounts and messages all of the time. Some of them do it on their own without any outside influence, as well.