Three Lessons from Threema: Analysis of a Secure Messenger