I believe IRC is more secure... it have so many different kinds of clients that getting an exploit running reliably is close to impossible. from java to mobile to text-only to chromium-based...
you can self-host your own too. you can plug in encryption too, and lots of other things. it's an older codebase, old protocol, (mostly) old clients and old users...
Lulz, I always assumed IRC was a clear text chat protocol w/ basically no security. Guess its based on my notion that anything that is close to as old as I am was created in a time when security was an after thought.