And it's also damming for private messaging on mastodon.
I once read vague complaints about it being a rushed implementation. While I won't trust those without evidence, I for sure wouldn't trust mastodon with my PMs. At least, not until how this was allowed to happen is figured out and fixed if necessary.
P.S. I'm still not sure I believe in PMs in the fediverse. If I need to share something and care about keeping it private, I'd rather move the conversation elsewhere.