This comparison looks neutral: https://www.freie-messenger.de/en/systemvergleich/xmpp-matrix/

I always run occ upgrade and occ db:add-missing-indices after a package upgrade, just to be sure that I do not miss any database migrations. Using Archlinux I wrote a pacman hook so that it happens automatically.

You could have a look at Kerberos. That’s what Microsoft took as base for AD afaik.