I wouldn't be surprised to find out its true.
The problem is it shouldn't be a blight because its impossible to prevent bad actors from using an actually private and secure messaging app.
So the act of reporting on it is a smear because most don't understand or acknowledge the impossibility of preventing those bad actors.
Threema bad:
https://www.schneier.com/blog/archives/2023/01/security-analysis-of-threema.html