Agreed! 💯. A leaked private key can gain access to all message history. We probably need something like an additional passcode over the private key to access it. Not sure if that’s possible with existing accounts.
Also, as clients evolve we may need to add image upload, mentions and other features that we have in regular posts.