Well Bluesky/the protocol behind it is decentralized

but the dm (direct message) functionality itself isn't decentralized and bluesky even mentions it/shows it that its unencrypted and centralized iirc

If you choose to use a centralized frontend to access Bluesky (everyone does this) and that frontend has to follow laws because it's run by a corporation... that's what you get.