I'd add actually encrypting all events in so-called "end-to-end encrypted rooms" to that list :/
I don't mean to be snarky, it's just frustrating to be told that it's common sense that this wouldn't be the case, when it's come as a huge surprise to everyone I've mentioned it to.
That said, I love Matrix, big supporter of the project and of the team, etc etc. Just, there's a lot of work still to do!