Surprisingly Telegram awfully good on that list
Edit: I forgot to add that I found something little of about that report where Signal hash to phone numbers are absent " Which clearly signal store it"! And on Threema FBI still includ it even though it’s optional and 99℅ of the user will not put their number.
As far as I know Matrix is sound. Probably just isn’t as big as Telegram yet.