Jami for iOS uses plain UDP as the transport protocol for 3rd party SIP accounts, which can leak username and passwords even with SRTP media encryption enabled, and can compromise the SDES keying (SRTP keys inside SDP), which compromises media encryption despite SRTP being used.
It should have an option to use TLS over TCP (SIP-TLS) encryption