This is just pure negligence apparently researchers attempted to contact developers since Aug and devs took no actions to protect their users and some of these users paid for this app https://threatpost.com/android-messenger-app-leaking-photos-videos/161741/