@aral that's what I call "technical privacy".
"Legal privacy" is easier to understand: everything not meant to be public, is private.
And sharing private message, like not-encrypted email or not public AS Object (like mastodon's toots), without correspondent agreement is violating privacy (France also have a "Secret de la Correspondance" legal protection).