Security isn’t the size of the app

This could have two meanings, one of which I figure I should address:

1. If you mean "size of the userbase for an app," then yes, even projects that fly under the radar are much more secure than "mainstream" options. That's the main purpose of this infographic.
2. If you mean "physical size of the app on the infographic," the reason they're different sizes is simply because they were hard to fit on one page, and this made it look nice ;)

Maybe it's because the current administration uses signal to plan acts of war and proton's ceo is supportive of said administration.

Ah, I believe this is what's called "a conspiracy theory" if you had more details.

Some of those mentioned likely are compromised, but cannot figured out which. The thing, is to diversify our risk and the privacy minded to use different platforms (Proton VPN and Mullvad VPN for instance).

The good news, is that if an agency is compromising something, they will likely won't use the intel gathered in court cases in order to leave it open to future prey, so that is good for vast majority of users. The very few that are relevant enough should not trust even the genuine privacy tools and resort to enhanced methods and combining methodologies.

My impression, and just impression, is that I would trust **Tuta **more than Proton (and not because Proton's CEO that many interpreted wrong anyways) On VPN... a tad more trust on Mullvad. Signal, I would not use it for high stakes communication but OK for most people. GrapheneOS seems okay and we know for sure it does not leak info on a daily basics, but we have to be careful, it could have an obscure code dormant waiting for a trigger or could easily send data to an unsuspected server, Ironically, if I were Snoden, I would feel more comfortable using a Huawei Mate with HarmonyOS than a Pixel 9 with GrapheneOS... of course China spies too massively, but it has far less beef with Snoden than the US does, therefore not of much interest to Beijing.

Remember that overwhelming majority of FOSS goes without any audit, let alone a comprehensive one. This is what some trusted party should put AI checking ASAP all the FOSS out there!

VPNs know who you are and what websites you visit, so no privacy nor anonymity there. With Tor... It's complicated. That's why we have guides like this: http://blog.nowherejezfoltodf4jiyl6r56jnzintap5vyjlia7fkirfsnfizflqd.onion/opsec.