I cannot say this authoritatively, but I inquired about the scope of the gpg.fail vulnerabilities that affect GnuPG (and at least one also affecting Sequioa, a Rust PGP implementation) to see if any of these things are a concern for DeltaChat and the response was that they are all out of scope for how DeltaChat uses PGP.
also DeltaChat uses rpgp, not GnuPG or Sequioa, and rpgp has been audited a couple times.

Winter blue tardis
in reply to Wes Derby • • •Wes Derby
in reply to Winter blue tardis • • •Winter blue tardis
in reply to Wes Derby • • •Wes Derby
in reply to Winter blue tardis • • •Winter blue tardis
in reply to Wes Derby • • •