> I think it's quite fair to demand basic security compliance for implementing an E2EE messenger. That's really a decision you should make, and not WhatsApp –

> I think it's quite fair to demand basic security compliance for implementing an E2EE messenger. That's really a decision you should make, and not WhatsApp – "do I trust this arp242 guy and his GitHub repo?" And some auditing isn't necessarily too bad, I guess, but a lot of this goes far beyond "basic security"; it's the type of "corporate checkbox security" that we all know works so well.