[…] it uses the X25519 public key… as a symmetric key, for AES-GCM. […] anyone that knows the public key can decrypt it.
Ouch.
Ouch.