Why would you assume it's "just security though obscurity" and not "security plus obscurity"? Or that "obscurity"" as a security measure is a tragic weakness.
This is a trap a lot of people fall into and I don't know why.
This is a trap a lot of people fall into and I don't know why.
I don't know much about Telegram's system, but if it is run on centralized servers, then that is a serious weakness...adversaries who have the capability to find and disrupt can exploit that so even though the communication may be end-to-end secure, the entire system however is not resilant against such attacks.