It is a us based non profit that doesnโt store any information about you
still it runs in AWS, Microsoft, etc servers, and as any centralized service policy and interests can change at any time in the future, which would be pretty bad when you have several countries fully depending on them, just look the current situation with whatsapp, you can not be resilient/sovereign like that
has been independently audited like four times.
could you provide source pointing to the security audits?