Fair criticism, v1 was RSA-2048-OAEP directly on the plaintext, no hybrid. I've just replaced hchat's weak RSA encryption with X25519/Ed25519 + AES-256-GCM