About security: I'm glad you decided not to store keys by yourself: the best secret is what even you don't know.

About chat: I think using the comments as chat is a wonderfully simple solution but even in case of Youtube, made no sense at all after the livestream ended. Not sure if it's an issue, though.