As far as I remember, the end-to-end encrypted DMs are relatively recent thing in Meshtastic. Before, the messages were just encrypted with the symetric channel key.

The scale of meshtastics avoidance of building security into the design is pretty epic.

This is not an easy problem to solve. Each possible solution requires a trade-off.