Telegram hasn't been secure since basically day 1. IIRC it went something like
Security experts: Never roll your own cryptography. Telegram: We rolled our own cryptography! Security experts: Don't. And it's broken. Telegram: uhhhh.... We fixed it. Security experts: It still looks really bad. Stop it. Telegram: says nothing