A breach tied to France’s sovereign Tchap messenger shows why modern secure chat is often won or lost at the account, device, and verification layer, not by breaking encryption itself.
Identity checks can open the door, but stolen session tokens and unhealthy endpoints can still keep an attacker inside unless access decisions keep re-checking device state.