All reasonable points, though I think whatsapp is secure - I think for most people the best choice is Signal for general messaging and assuming everything else is largely public.

Even in Signal people can and do take screenshots, so really probably just best to be cautious of anything in writing that you wouldn't want published.

This is one reason I'm excited about Urbit - I think it'll be cool to get out of the dependence on centralized services.