Five/Nine Eyes

What attack vectors could deanonymize Session messenger users?

Session routes messages over an onion-routed, decentralized node network to minimise metadata and uses end-to-end encryption; the project claims no phone/email required and no central identity storage...