MeshCore has verified public key sharing; see what happened to the other network at defcon. Direct messages are encrypted.