It's still better than most alternatives in other respects it seems to me. The fact that they go out of their way not to track IPs or store personally identifyi

It's still better than most alternatives in other respects it seems to me. The fact that they go out of their way not to track IPs or store personally identifying information means there is less data available for a hacker to access if their security is compromised. Sure it's possible that a sophisticated attacker could add tracking of information that DDG do not intend to track but the situation is a lot better than with Google. They are also safer from other types of non hacking attacks like court orders by deliberately not tracking information that might be demanded. Security can always be improved but they already seem to be a much better choice than most of the alternatives.