Assume that every private platform/app/service w/a doxxed dev/CEO is compromised.

Only use open-source, auditable platforms.

It's only a matter of time before these entities push a backdoored update (if they haven't already).

I think metadata is the biggest risk with them (and any of the recommended apps for that matter), but they do "kill people based on metadata."