It does matter that it requires compromising the device instead of the server being able to read all messages. All cryptosystems are vulnerable to compromised

It does matter that it requires compromising the device instead of the server being able to read all messages. All cryptosystems are vulnerable to compromised devices and $5 wrenches.