"Ghost users" are also a class of protocol and UX bug in secure messengers that are worth looking for; you will find secure chat programs where it's possible to add a member to a group with a very strong chance of not alerting other members of the group, whereupon the E2E encryption scheme of the system does all the work of decrypting the messages for you.