matrix-sdk-crypto vulnerable to encrypted event sender spoofing by homeserver administrator

Missing facility to signal rotation of a verified cryptographic identity

UserIdentity::is_verified not checking verification status of own user identity while performing the check

matrix-sdk Impersonation of room keys