Wasn’t there also a controversy where some people believed that telegram was private and secure, but that only was for a very limited subset of their features?

i think you’re thinking of how you have to go out of your way to start a “secret chat” for it to have the touted encryption. those “secret chats” are way less feature-rich than the standard ones though, which sucks ass