Could some explain how are they going to protect me from mitm (especially on their own side)? Should I go through usual key exchange procedure? Could app potent

Could some explain how are they going to protect me from mitm (especially on their own side)? Should I go through usual key exchange procedure? Could app potentially leak my keys or something?