Assume that every private platform/app/service w/a doxxed dev/CEO is compromised.

Only use open-source, auditable platforms.

It's only a matter of time before these entities push a backdoored update (if they haven't already).