I don't know firsthand, but I believe they encrypt each message for the recipient, hence the scaling issues. They've been working on adopting MLS for 3 years, which will help a lot when it gets done.