i think signal has been pwnt for a long time
not even many people know that it was originally named "redphone"
i was using that back in 2013, and the hole thing swings around spam resistance based on SMS confirmation
as many people know, SMS is broken security a long time ago, so their entire business model is in the toilet since years
they have usernames and PINcodes now
also, if the gov wants to read your messages it doesn't matter if your messenger is double-ratchet-super-encrypted... they just ask the OS to read your whole screen.
its nice for ISP level privacy tho
yeah, there is so many battles we are still not even close to winning