That's nonsense, security isn't only about E2E. Telegram is encrypted between clients and their servers, and are stored encrypted in their cloud services (at least if we trust what they say), a defaults that trade some level of privacy/security in exchange of a better UX, but you can decide to do the opposite trade by creating E2E discussions. How does that make their system not secure?