Actually we can't really be sure that message contents are really encrypted since it's not possible to verify if the app people are installing is built from the same source code that is made public unless I'm missing something.