you could do that all in the AppView, like bsky DMs, and use ATProto sso though

that seems like a decent enough way yeah. though i guess then it's only like halfway on atproto but that's not necessarily a bad thing