It is true that Matrix massively leaks metadata. But so does xmpp. For secured decentralised protection of that there is simplex. Xmpp is vulnerable to the mitmls attack som government used against a russian server and that attack vulnerability has now been mandated in EU(SSR) law.