There have been some concerns with their security:
https://www.schneier.com/blog/archives/2016/03/imessage_encr...
https://www.pandasecurity.com/mediacenter/technology/need-kn...
https://www.tomshardware.com/news/imessage-weak-encryption-m...
Additionally, iMessage doesn't have any means of out-of-band key verification, so you actually have to trust Apple to faithfully exchange keys and there's no way to verify that it's done so.
iMessage also tells you after a message is sent (via the color of a bubble) whether the recipient received it using iMessage. That's not very good assurance if, say, you're messaging a journalist in an authoritarian country. Will it go out over SMS or iMessage? You can find out, but even a little bit of doubt about that can have significant consequences.
I'm glad iMessage does do encryption like it does, but it's no replacement for Signal and WhatsApp uses libsignal for its encryption.
Do you mean "you have to trust Apple"? I don't see what Facebook has to do with iMessage.
[EDIT: Now corrected above. Thanks!]