[samueloph]

>When your app is closed source, all claims about security and encryption are meaningless, unless some solid auditing is done.

That is not true, closed source does not mean you can't read the source code, last year (and i bet is still possible to do it today) i decompiled the apk into java source code, i remember i made it to confirm the telegram url block[1]. But the point is, if its possible to read the client source code, it should be possible to assure at least some level of security.

And yes, i always recommend whatsapp instead of telegram for family members because telegram doesn't have default e2e (i feel bad everytime i have to say this).

edit->for clarification, obviously i prefer to use a full open source end-to-end encrypted messenger

[1]http://www.androidpolice.com/2016/09/09/whatsapp-is-blocking...