Well, until we learn that there is a backdoor in their implementation, allowing any big actor to swoop in and either crack the crypto easily, have access to an unencrypted copy, or steal the passphrase.

Then we just have put all the things in the same basket for the convenience of mass spying, like we did with https, which any entity big enough can MITM by using their root certificates.