

It was very clearly advertised as experimental and insecure:
Warning
Private message and channel features have not received external security review and may contain vulnerabilities. Do not use for sensitive use cases, and do not rely on its security until it has been reviewed
Did you have a question?