But aren’t these key pairs generated per session and/or per contact? So once you switch to a more secure / auditable client this only matters when communicating with people on whatsapp. But they presumably have a backdoor in their app for the NSA anyway.