..where's the security risk in not opening a private message window for a message sent to all users, but still displaying the message?

And PhantasyX, what IRCd? After thinking about it, the way the IRC server sends the message probably is different between ircds.