IE like Crypto AG:
In 2020, it was revealed that the Swiss company, Crypto AG, which provided secure communications services to ~120 governments throughout the 20th century, was secretly ran by the CIA and West German Intelligence. The CIA and later NSA were able to read encrypted communications for many countries such as Saudi Arabia, Iran, Italy, Indonesia, Iraq, Libya, Jordan and South Korea.


Unpopular takes incoming.
Signal.
Way too many red flags.
Do you truly believe that a company that wants to preserve your privacy would take this direction?
And i don’t care how secure the protocol is, how well the code is audited. They can still map your social graph.
Anyways, because of my threat model, i still use Signal. But if i were an activist i wouldnt touch it.
More unpopular takes:
Tor and Mullvad probably compromised too. If a service gets too mainstream, I dont believe for a second that they would let it run without care. They would take it down, or control it.
Now, these services are still usefull. For example mt threat model is to deny my shit to the big tech. So they are useful if you want to escape data collection for adversiment purposes.
I don’t think they would burn the reputation of these services for low hanging fruit like selling data for ads.
Signal, I agree… it has flags for me in so many ways.
Tor. Unlikely though. For sure many nodes are controlled and now they are using massive power to unlock the traffic, but was not set up as a honeypot per se, it is now, probably, technologically quite compromised though.
Mullvad. Funny, your suspicions probably got enhanced when Mullvad makes a browser based on Tor’s. But I still not highly suspect of Mullvad. Quite steady organic growth, profitable, no much pronouncements or catering to certain “targeted” groups… No mayor red flags for me.