They built it for their spies, so they can exchange information without traces. And they popularize it, so metadata analysis becomes useless. It's unlikely to have vulnerabilities, because other states could find and use them.

If it was indeed built for spies as they claim then I would expect that they know how to track communications through it because you have to know when your spies are leaking materials or have gone rogue.