Used to recommend XMPP (lol) but even with whatever encryption the servers still know and control too much. Like who you are chatting with (entire contact book) and when, plus attachments most of the time. And there was also the jabber ru incident... Don't feel like pulling up the article rn but basically it got MITMed by one of the ISPs (counting the hosting provider as ISP), with a new valid TLS certificate and all.

Tox supermacy! What looser needs a backlog, pffff.