[winterdeaf]

I would argue that it is not misleading -- the website domain is, after all, "breakingthe3ma.app".

The title of the paper presents a more academic angle, and is intended to highlight what the "learned lessons" are, but let's not forget that Threema was vulnerable to our attacks for 10+ years.

[tmalsburg2]

I would recommend reading the article and not just the title and url. Editorializing also plainly violates HN guidelines.