I think disappearing messages only works if you activate it on your local device. And if the man compromises someone without everyone else knowing, they get all messages after that.

But yes... it does limit what can be read. My point is it's not perfect.