It is also worth noting that the centralized servers (that seems to be hosted on AWS) are running closed source code  though it does not impact confidentiality of the messages they could be exploited to monitor relationship and activity between targets.