@Maenad but if you need secure stuff, as always, use secure things, though telegram basically cant be trusted and people keep recommending it so i honestly dont see the point for that one, but i digress, the problem is that the middle ground is 'i dont really want eavesdroppers but username exchange (or worse, phone number for signal) is not worth it (or its own threat)