The metadata is indeed limited since a user does not have a unique global permanent identifier. At most they can track metadata within a single chat room but iirc they even have mitigations for that:
https://github.com/simplex-chat/simplexmq/blob/master/protocol/overview-tjr.md#threat-model