Organisation Role creation should have a Role which restricts viewing all chats.
Currently new role creation permits to view all chats of all members.
Authenticated Sensitive messages like OTP's can be viewed by all Members/ Roles