Then let us know when they are solved. Until then, I have a lot more hope in matrix than XMPP. They at least seems to be making progress in the right direction, although they are not there yet either.

Signal remains the best option for now.

So much cope you didn’t even notice no one mentioned matrix. We are comparing XMPP with Signal.

Your reasoning would hold up if 80% of xmpp wasn’t running on Conversations or forks of it

Also, you really think saying only 20% of your chats are insecure is somehow making it better?

The encryption being crap really does not depend on the threat model. Sure, in some threat models you may not need e2ee at all but in that case, what’s wrong with WhatsApp?

The issue with XMPP is that security really was an afterthought. Not only is e2ee an optional extension, but there are actually 2 incompatible extensions, each with multiple versions. Then you have some clients not implementing either, some clients implementing the older, less secure one. Some implement the newer one but older version of the spec with known issues. And of course, the few clients that implement it well become incompatible with other clients that don’t if you enable e2ee, so it is disabled by default.

That is all before you start looking into security audits or metadata harvesting.

Tell me you don’t know anything about security without telling me you don’t know anything about security.

Except cluster bombs are not against the Geneva conventions. Though any weapon can break the Geneva conventions if intentionally aimed at civilians or some other situations.