It may be valid against closed source apps, but I don't see how it can be more secure than build-and-self-host OSS apps for private messaging.