Clients see everything decrypted so it can be a threat if someone put malicious code in damus