Assuming that there are no security bugs in handling the incoming data, it's apparently as secure as communication with Tor hidden services. Each chat user self-hosts a hidden service, with messages between users being sent via a symmetric pair of circuits mutually identified using a random nonce.