There are many instances and instance operators to choose from. At least one of the choices may be sufficiently trustworthy for most users (e.g. an instance for their city run by someone in the neighborhood). You could also run your own instance.

These options are better than trusting a corporation.

> The instance operator can see everything because there's no encryption.

What additionally is an instance operator seeing that isn't already public? Are you referring to direct messages and privacy/blocklist settings?