If the client source proves that the message is properly encrypted though (they're using PGP), the servers can be as insecure as the open internet and it should be ok
> Distributing to other servers makes it impossible to give any guarantees about the security.
Not sure what they're referring to.