author here.

I don't think you understood what I am complaining about. I am complaining exactly about chrome only and usage of non-standard api.

As for storage, the web client is requesting non-standard file system permission exactly to store things. I am saying they should use a standard API such as IndexedDB for that kind of thing.

I do understand a thing or two about IM having worked on more than a client before. There is no need whatsoever for the hacks they did...

As for surveillance, thats another can of worms that is not protected by what they are doing. Traffic is intercepted at other vulnerable spots such as the carrier itself or ISP.