Most of the major IM players do not design security into their systems. Because of this, instant messages are subject to eavesdropping and other security-related hazards. A good IM protocol must be designed with security in mind to make IM dialogs as secure as a personal phone call, if not more so.