Yeah, for example,
people on nostr write their simplex profile.  Everyone can see nostr metadata.  So if you write someone on nostr , then a hacker can write back on simplex saying to talk here its safer 

 so second factor authentication of who you're actually communicating with on SimpleX is important