What bothered us the most with HipChat was their lax security model. Any file uploads in HipChat would be uploaded to an S3 bucket and opts for security via obscurity [1] as opposed to proper authentication.

This forced us to send sensitive material via email as opposed to directly via HipChat.

[1] https://community.atlassian.com/t5/Hipchat-questions/Securit...