That's what I understood too. AFAIK, they only could 'break' contact, and not control the actual public identity key, so no way to read user messages.