I already use encrypted vaults, but I guess I need to encrypt the whole partition/drive too. My point is this should not be necessary for a security-focused app like Signal. 

 Edit: I should have said "privacy-focused" in the previous post.