[aepc2]

Or conversations.im? Matrix + riot leaves a heap of meta data about you on the federated server. If that server is compromised, so are you.

[Arathorn]

Surely Matrix doesn't leave any more metadata than XMPP with MAM enabled (which presumably most XMPPers use these days)?