I wondered if that might be at least part of the reason that Duolingo decided to move away from the activity streams. While not private exactly, some people were harassed quite badly. It's unfortunate.
I think it is a great idea - and if you worry about cyberbullying - then one can unfollow the bully - and thus eliminate the ability for bully to send messages.
For most users I believe it would be a very welcome addition