Personally, I consider the fact that private messages on this forum are not end-to-end encrypted to be a current limitation of Discourse. The Discourse Encrypt plugin would allow for private, encrypted messaging between end-users but it’s not available for forums hosted with discourse.org yet (it’s still a work in progress)
Yes, we can change the wording of the privacy policy. In fact, the current privacy policy was mainly written by Victoria (former MaidSafe employee).