Yes that is what I mean, admins can only see private messages that their own local users are either sending or receiving. Not from users on other instances.

I agree that privacy is important, but most admins probably couldnt care less what their users are writing in private messages. And there is a tradeoff between implementing end-to-end encryption, or implementing other features that may be more important.