They broke the metadata, not the cipher: the Ricochet lesson

In 2024 German investigators deanonymised a Ricochet user without breaking Tor or the cipher — they timed the network and made the ISP name the subscriber. The reason it worked, and the one design choice that removes the anchor the attack needed.