Most Pidgin and other instant messaging clients do not support encryption. This means that the messages sent and received are in plain text, which means that anyone can read them.