On the one hand, the animation did give an important distinction, that Bob’s message was encrypted before it got sent to servers. But even if they do everything “right”, in that users’ private keys are kept private and never leave the device, it’s closed source they control. We can’t verify that’s what they’re doing. Even if we could verify that’s what they’re doing now, and they’re 100% committed to user privacy now, there could be a future where company direction changes, and they can roll out an “update” that is able to read users’ private keys and send them to the company.
The whiteboard animation actually makes sense, just people can skip the “send to Chadder” step. PGP has existed for a couple decades now.
