Ever heard the first rule of encryption? "Never roll your own crypto". Well they broke the rule and they won't let anyone check if the crypto is secure or not.

Not to mention encryption is off by default and your plaintext messages are stored on their servers...