even if all meta employees see the source they cannot read messages as long as keys as generated on-device, which is verifiable