The simple answer is that nobody on the Pretendo dev team knows Ruby, which Discourse is written in, so making a major change to its source code would be quite difficult. Discourse’s plugin API is also very poorly documented.
Group messages seem good to me personally because they are actually private, but no admin has set this up yet.