Hacker News Reader

Ask Moxie? He uses it for Signal also, and unlike WhatsApp, Signal is "sold" as secure...

I don't think anyone has implied that E2E-crypto without out-of-band key verification is bulletproof. Both WhatsApp and Signal allow you to do that.

And Telegram. If someone bothers checking this they'd also use Telegram's secret chats which do have open source end to end encryption.