An app designed by US company doesn’t represent anything related to security.
The founder of telegram always complains that the FBI has access to signal, apple and other related chat apps.
He suggests to use private chat, if it is confidential. The message transactions happens between peer to peer and it doesn’t go to the server. He was claiming all the privacy feature that you get from signal is the almost same as private chat. Signal stil uses the server.
My account was compromised once, though I have 2FA enabled. I assume that I was accessing my account from a browser on a windows pc, it had virus but not 100% sure. Someone was able to access it, change my name send multiple crypto related links to users in bulk.
It contained years of chat history with my wife. I was able to recover the account. But I deleted all the chat history.
I still use it to get alerts from various automated scripts I use, mostly for the bots with free API access. No personal data go in there.
The mistake might be from my side. But if someone takes over your account, you lose everything.
I feel the spam filter is as strong as Google. Receive a lot of spam, even though I didn’t put my email on a random website, but the spam is not blocked.