Well, like any payment provider, you would have to have basic trust in the chat app you were using, which would presumably be securely storing your payment details (like WeChat and FB Messenger do already).