It (almost always) lacks forward secrecy or, indeed, any encryption at all when using unauthenticated networks. These are much bigger problems. The fact that

It (almost always) lacks forward secrecy or, indeed, any encryption at all when using unauthenticated networks. These are much bigger problems. The fact that they haven’t been fixed is so glaring that one can attribute it to enemy action, not carelessness.