"Public key from server" is an ambiguous phrase. I took "from" to denote possession, not source.

After reading the other sources of information, it's clear it is a secure protocol. More so when designed by the Snowden-approved Open Whisper Systems team.