The Session team claims they don't keep the signing keys in Australia.  You raise a valid point with this sure.

Regarding the Oxen coin, I disagree with their business model yes and this is valid criticism.  However, if they did not rely on the coin, they'd have to actually make money charging for the messages or names. Which they are not profitable doing