That's why you can't trust encrypted closed source apps. This time it was the "good guys", but you never know who is behind a software company.