End-to-end encryption is a pretty complex solution for that problem, and brought with it a ton of other UX problems. So it would be much better if we can resolve that ‘accidental staff access’ concern in a simpler way.
We have this site setting which we’ve been developing for a while. I just went ahead and un-hid it so it’ll be available in the admin UI:
This will suppress topics and PMs from the UI for admins, unless they are participants. Please note though: it is not a security feature. Admins can still access anything. It’s just a bit of extra friction to mitigate with the ‘accidental’ cases you described.