I like and respect Elon, and I'm grateful to be on this platform. But when he claims 𝕏 Chat is "much more secure than email," I feel obligated to explain the technical reality to my audience. That statement is true in the same way a screen door is more secure than no door. But that's not the comparison anyone should be making. 1. 𝕏 Can Read Your Messages 𝕏 recently added safety numbers, which is a step forward. But here's the catch: your private key backups are stored on 𝕏's servers. Safety numbers help detect external hackers, but they cannot protect you if 𝕏 itself or a rogue insider, or a government with a warrant. @signalapp's safety numbers work because your keys never leave your device. There is nothing for Signal to turn over, even if compelled. 2. No Forward Secrecy From 𝕏's own documentation: "If the private key of a registered device is compromised... an attacker would be able to decrypt all Encrypted Direct Messages." One key compromise exposes your entire message history. Signal's Double Ratchet generates new keys for every message. Compromise one key, you get one message. Past messages stay encrypted. This has been the standard in secure messaging for over a decade. 3. The "Juicebox" Vulnerability 𝕏 stores your private keys on their servers using a system called Juicebox. Cryptographer @matthew_d_green's analysis suggests this implementation is software-only, lacking Hardware Security Modules (HSMs). A 4-6 digit PIN does NOT help protect this. That is trivial to brute-force if 𝕏 (or an attacker with server access) disables the rate limiting. 4. Full Metadata Exposure 𝕏 explicitly states metadata isn't encrypted: who you message, when, and how often. As former NSA director Michael Hayden famously said: "We kill people based on metadata." Signal uses sealed sender technology to hide even this information. 5. NOT Open Source 𝕏 promised to open source XChat and publish a whitepaper in June 2025. Neither has happened. Signal has been open source and audited for over a decade. The Bottom Line: I'm not saying don't use 𝕏. I'm saying don't use 𝕏 Encrypted DMs for anything you wouldn't post publicly. For actual private communication, use @signalapp. It's free, works on all platforms, and the cryptography has withstood a decade of scrutiny from academics and nation-states alike.