There was a security audit https://getsession.org/session-code-audit that result in this: “The overall security level of this application is good and makes it usable for privacy-concerned people.”