Telegram is only buildable by the company, not by distro's AFAIK. So trust is lowered and this limits exposure to just your download directory.