1) It is encrypted, if you initiate an encrypted chat, which is not the default.
2) The clients are open source, you can even write your own TUI around the API.