> if the two parties understand how to send encrypted messages over web clients, isn't that still secure ?

It is secure, except that metadata are open go Google. And metadata is the new data nowadays.