[inconclusive]

> the majority of users will probably not verify keys. That is our reality

The server having knowledge of who it can MITM without getting caught is irrelevant if nearly 100% of users verify keys.

I want a better reality.