I don't use it these days but please enlighten me or show me the specific section you are talking about. Specifically, I was referring to libolm.

This is a starting point: https://nebuchadnezzar-megolm.github.io/

Looks like they were addressed: https://matrix.org/blog/category/security

Glad it had nothing to do with libolm itself but how it is used/not-used. I thought they had 3rd party audits for this.