What in the diagram gives you the impression the public key belongs to WhatsApp? Presumably WhatsApp is handling PKI.
After reading the other sources of information, it's clear it is a secure protocol. More so when designed by the Snowden-approved Open Whisper Systems team.