Telegram uses homegrown crypto with known weaknesses[1] and doesn't do end-to-end encryption by default (your messages are stored on their server in plain text).

[1]: https://news.ycombinator.com/item?id=10713064