>paths can access personally identifiable information (PII) such as names, phone numbers, and other mobile device

And guess who’s still using phone numbers as an identification in their messaging app?

It might not be seen as a direct breach on such apps that promote itself as “privacy focused”, but these breached data eventually will be leaked, and knowing name/phone is more than what’s needed to carry out an advance attack, spear phishing, expoits or even sim swap attacks, either on the phone itself or targeting those specific privacy apps, let alone to unmask people who’s using them, basically the opposite of what private is meant to be.