At least the story of them being dodgy (in terms of origin/funding) and playing up encryption which is not enabled by default is pretty well documented by now. I get that people really like the UX of the app, but I wish more of them approached Telegram with "Russian gov has access to my unencrypted messages, but maybe the encrypted ones too" mindset.