To piggy back onto what @ProdigalFrog@slrpnk.net has said, it may be worthwhile for you (depending on your threat model) to also add the Molly repo to your f-droid client of choice and install Molly as your Signal client. It's wholly compatible with signal with some additional security features. However, the more repo sources you add the more risk you're at for a bad actor taking control of one of those repos. It's not a question I can answer for you directly, it's just what I'm doing.

(and I realize now after writing all this that @acockworkorange@mander.xyz already said this)