Everything centralized is a potential intelligence asset it's for you to decide whom you are willing to potentially give your data to. For the leaking part with

Everything centralized is a potential intelligence asset it's for you to decide whom you are willing to potentially give your data to. For the leaking part with not encrypting all private messages and no encryption support for group messages everything screams for a oops didn't meant to scenario. Software problems or hacking it will read: "We couldn't have done anything, sorry. Next time just enable encryption mhmkay?"