Paynym - the fee is clear but you can get it for leas in Sparrow (last time I checked)

Ricochet - paying for convenience no?

Xpub stealing - there is more risk if you use their mobile app AND their nodes assuming they are a bad actor. You can use with your own node or you can use with Sparrow, Foundation and I'm sure another one was announced last week.