I just found the mention of the state confusing because surely this app is equally untrustworthy regardless of its origin. American companies can't be trusted either—they've long since indicated a willingness to work with law enforcement and intelligence. E2e encryption is the only meaningful answer.