1st: Ghost Call recommends ZRTP media encryption
2nd: ZRTP hash allows a MITM (Man In The Middle) and creates a risk of decryption.
Why recommend it then? Am I missing something?