I don't see how the existence of one attack vector makes addressing another irrelevant. To infiltrate an encrypted group chat like your scenario, the attacker

I don't see how the existence of one attack vector makes addressing another irrelevant. To infiltrate an encrypted group chat like your scenario, the attacker needs to actually do social engineering work.