Here also my repsons, since people might not open the github issues: “I’m aware of these early issues, and I’m also aware that they replaced the hash function with KECCAK-384 for the proof of work and in general have grown a lot since then as well as hired a lot of people including cryptographers. But all that aside, this project uses IOTA simply as an immutable database with some additional spam protection. For the encryption, we are using the web crypto API (AES256-GCM). If you have ideas for a potential IOTA replacement feel free to share them. I’m completely open here. For example, I looked into orbitdb, but I haven’t included it for multiple reasons (e.g., hosting an ipfs gateway inside a website isn’t ideal and it hasn’t any spam protection).”