Beeper is pretty good with it, as they make it clear that it’s insecure and use an encrypted protocol to get the messages to the server. Still, it’s better to host your own (which Beeper lets you do, as it’s just Matrix) or not use it.

Your security is actually worse than a pinky promise in that case because you also have to consider that they could be hacked.