I think that companies like duckduckgo who make a product in the consumer's interest are a bit dubious as long as their product is not open source.
Aside from Telegrams own insistence that their crypto protocol has been independently verified, do you have another source? My understanding was that nobody has actually bothered to verify telegrams source code: https://security.stackexchange.com/a/49802