Well it is indeed a point that it is yet to be reviewed by an acknowledged security company, and toxcore's last commit was in 2015.
I'll search for one of these threads though
Thank you. I really do not know if I should use it for sensitive information on a daily basis.