Yes, but what counts is practical security. I think we should keep this in mind.

For example someone may make a false impression that because the messenger uses the signal protocol, it is secure (and points to this paper), but in fact its implementation makes it considerably less secure.