I haven't looked deeply into this implementation, but with OTR's forward secrecy and 3.1+ authentication, is that not enough to defeat even the server being compromised? (meaning, at least you would know it was compromised assuming you trusted the actor on the other end)