I am not envisioning an IM system.

I'm envisioning a correctly implemented encryption layer for how DMs currently work (with the caveat that I believe cryptography should never EVER be done in the browser (unless an extension or whatever)).