Their server backend code is closed source and they're running custom crypto. Also groups and desktop clients don't support end-to-end encryption.