If that's part of the threat model, a layer 7 protocol can encrypt and sign the payload. Then anybody terminating the connection wouldn't be able to read and modify messages.

There are also replay attacks and probably many other issues I can't think about. Maybe some IM protocol already deals with that.