@bcrypt it looks like they're still vulnerable to payment provider attack, and they'd need to have plausible deniability at every level of the interface, but their comment on helping law enforcement in the case of harm would indicate that they keep records of some description, which makes them vulnerable to bring raided.