I actually think it's a very good thing that cohost lacks a PM/DM mechanism. At the end of the day, no social media's private messaging system is actually private. The admins can read them. See for instance much of the discourse around Mastodon. I firmly think this is one of those "the only way to win is not to play" cases.