Probably on device encryption before anything is sent through their servers
I'd honestly be fine with accepting the compromise of hosted bridges, especially since they seem to offer the ability to self-host the bridges, while using Beepers' Matrix infra. Gives them some extra cred in my book.