Its like throwing a physical coin to your friend and someone else catches it. They are working to link them your npub so only you can redeem them.. Yes sending as dm is safe because its encrypted.