An account hijack, but still - how did they recommend and approve such use cases in the first place?
When that app got launched, some “EU people with strong-opinions” argued with me on X claiming it was rock-solid. Well, maybe, except it seems the users weren’t quite as smart as the programmers.
If they used Haven, most of data would have expired from the servers and wouldn’t have leaked (assuming they just hijacked the identity, not the device).
Maybe the app even has configurable auto-delete, but no one set it…