It doesn't sound too hard to layer on top of AT Proto. You already have cryptographic building blocks so you can encrypt content for specific users, I'd guess the only thing that is missing having something like that is the actual UI.

But I haven't done a deep-dive into the protocol, just a surface glance so far.