> Also, the server knows your contact list, (and bans you if you dont sync), and someone could tap your wifi to get your contact list.

Wouldn't they also have a contact log for each user?

That plus the contact list is a pretty nice chunk of data for use by their parent company.

And also, it would surely be useful for law enforcement. Has it been shared with the courts?