They had a serious issue that would allow other sites to access your texts. Found by taviso from google project-zero.

I give them the credit that they fixed it within hours, but should the project-zero team fill in for their testing team ? :-) https://bugs.chromium.org/p/project-zero/issues/detail?id=15...