I use Authy. It has Apple Watch app for quick access.

There is an standard client-server encryption in Telegram. If you want e2e encrypted chat, then use Secret chats. Almost all messengers nowadays use client server encryption. So the biggest problem is not man-in-the-middle attack, but physical access to device by someone and malware installed via breaches.