Matrix

The page I shared does also have a section about security advice which has a link to Onion services best practices by Riseup Collective. I figured that those who would be at risk in the event of an information leak would take this section to heart, because many use cases for onion services don't actually require location hiding, like when the site is also available through the clearnet, or when the service is only used by you and people you trust. In those cases you may as well set HiddenServiceSingleHopMode 1 to reduce latency.

It's also worth noting that in the past some high-value onion services have been deanonymized, so depending on how much of a target the service is it's worth considering taking extra precautions to prevent getting swatted if the server gets compromised