They have a poor track record for security, plus Tox came out from the 4chan crowd and was making very bold claims around security (hinting that it could resist state sponsored attacks) while not having published a threat model nor a security assessment.