Clients see everything decrypted so it can be a threat if someone put malicious code in damus
What you mean with “everything “?