No one is going to the trouble of getting their target to GDPR-request their private DMs as well. This misses the point of the blogpost.