just like ... Skype?
Do you have a link to that? The last time I looked at the news, Skype was using SSL to servers so Microsoft could see the data transferred, and while that's not ideal, it's still very different from your implication that everything in the protocol is now transmitted in the clear.
[1] http://arstechnica.com/security/2013/05/think-your-skype-mes...
However this doesn't seem to be the case as A. you're unable to upload your own public key, and B it's still client-side JS. A subpoena would force them to pass on your session logs, encryption keys, etc.
Presumably the encryption of open source SIP clients and Firefox hello are more trustworthy(?).