Can those who run their own SimpleX servers always be trusted? What is stopping state surveillance from operating/infiltrating one or multiple servers on SimpleX?

Tox is totally decentralised and you can use a VPN if you want to conceal IP- or select those you chat with as people you can trust.