Please, update your app that supports Tor, VPN, that only uses the latest form of TLS, and eliminate HTTP pure text, or badly outdated “security” features, that still uses SSL, or plain text, vs TLS encryption. The same applies as to why OpenPGP isn’t included by default in email, or the same direct perfect forward secrecy between connections. I understand offering ads, makes no issue or problem, and so long as they use “safe” annoying pop ups and stuff. So long as ads would qualify to the “safe” ads that are easily approved and allowed by any half decent content blocker. I grew up using ICQ, and would gladly jump back towards using ICQ only, if those security holes were fixed and removed.