When I setup a Gmail smtp, I see that all emails sent from moodle are also copied to the sent folder in the email account. That means, if someone send a message to someone else, the plain text message is dropped in the sent folder in Gmail.
So, those who manage email account actually can read private messages. I don't think that is problem with Gmail, because the message is issued and sent from moodle.
Any idea about that?