We both use Nostr MLS, so the protocol-level security is essentially the same. However, XChat has done more work on security at the app level, such as media encryption, encrypted local database storage, and two-way message/session deletion.