If Telegram claims to be secure but relies on unsecure technologies that makes it easy to circumvent its security isn't that still Telegram's fault?

Just because others are also vulnerable to the same failings doesn't absolve Telegram of responsibility. Don't claim to be a secure platform if your security is easily circumvented.