A high-profile data leak sheds light on a privacy app popular among journalists and Beltway types. Is it safe?