So something I’ve never quite gotten, is what’s to stop someone from just running a message through pgp before using an insecure app? The math is out of the bag already.

Not only that, those backdoors going to be really big juicy targets for bad actors and they will be cracked by someone either publicly or privately in a matter of months…