Improving the security of "measurement-device-independent quantum communication without encryption"

In 2018, Niu et al. [1] proposed a measurement-device-independent quantum secure direct communication (MDI-QSDC) protocol and quantum dialogue (MDI-QD) protocol using Einstein-Podolsky-Rosen (EPR) pairs. In their protocols, the two legitimate parties prepare two sets of EPR pairs in their locations, and send the partner qubits of their EPR pairs to an untrusted third party (UTP). Here we analyze these protocols and show that 50% of the information about the secret message bits is leaked out in both the protocols.