Electrum nodes (aka servers) can not compromise your security. the only communication you are making with these nodes is to get block headers, your transaction history and to broadcast new tx you make. all of which are public information, nothing secret to compromise. the only thing malicious sever could do is to lie about state of a transaction. they could tell you it is either confirmed or unconfirmed (or doesn't exist at all) while it is the other way around.

the only real risk is your privacy but you are already giving it up as soon as you start using an SPV wallet instead of a full verification node.