Why don’t “rogue” clients have access to chats?

You don’t need to reverse engineer because the protocol is documented and the clients open source: https://github.com/peter-iakovlev/Telegram-iOS

If telegram was serious about privacy they’d make end-to-end encrypted chats default instead of a hard to use option and storing your unencrypted chats in their cloud by default.