It still need to use the Ethereum private key, so some amount of risk is there. May be a chat application based on steem blockchain would be a better option, because the memo key can be used to encrypt the message, and that will not compromise the security of our private keys, at least the Active or Master key. I wish some steem dev would explore that option, based on this as this is open source.