So it turns out that signing up for an app which explicitly breaks the promise of end-to-end security for an end-to-end-secure messenger, in order to “have your messages all in one place”, is insecure. Who’da thunk?