I would recommend Signal and maybe Tox (protocol, has several clients).
Signal is a nonprofit. They make it a point not to collect your data. Just the phone number. Military folks seem to like them.
Tox is not a centralized entity at all, anarchists seem to like it. Multiple Tox clients exist and use a common protocol and network. Messaging happens via peer-to-peer, lookups make use of servers. For messaging to occur, both communicating parties have to be online, so don’t expect much convenience.
For ease of reading, the investigation he refers to:
https://harpers.org/archive/2025/01/the-ghosts-in-the-machine-liz-pelly-spotify-musicians/
In short: fake artists with stock music (changing labels and other camouflage applied). Likely goal: to depreciate streaming counts for actual artists and increase profit margins.