Severe security issues: hardcoded encryption key + IV value

If I am reading this right, the encryption key and initialization vector for the end-to-end encryption is hardcoded into the app, and is not random at all.

var SK = []byte("696D897C9AA0611B")
​

in the source code right here and this issue in the code right here:

cbc := cipher.NewCBCEncrypter(block, []byte("RandomInitVector"))
​

It is a fixed string "RandomInitVector" converted to a byte slice, not an actual random value, meaning there's no guess work involved, since the answer is right above.

The encryption seems completely defective and irrelevant. Not great especially coming from a Chinese app. Maybe don't use it for political writing, China is not a free country haha