are you using a nostr client that supports deterministic builds? or verifying the relays you connect to? I mean same goes for every single piece of software we run. unless you build it yourself and verify the hash you are placing trust somewhere. dunno why exactly Simplex should be more sus