yeah, Signal is a tricky one for me. I used to use it for a long time, but never felt really safe and comfortable with the whole thing. I'm not entirely sure why, perhaps because the features did not match the money it would take to build something like they have (as in, dayum this is free?.. why is it free..). Naturally people called this a honeypot from a government - but the app in opensource and auditable, right? Signal still doesn't feel right to me, here is the only stories I know beyond my own feelings that make it sus:
- for a long time you had to sign up with a phone number. There are usernames now, I am unsure if you still require a phone number in order to sign up
- there was this big drama over a very, very long-standing vulnerability regarding the desktop version of signal. Pretty big exploit imo. Only after it gained traction, Signal dev said they would fix it, CEO doubled down saying it was not a big issue. Unsure if it's fixed now or not
- Someone from a reputable Software Auditing company was blocked on twitter and github by Signal. Major red flag lol
However if you don't feel the same way and still want to use Signal with some extra peace of mind, there is always the Signal fork "Molly".
I moved to Session, which has lots it funding RIP and will be closing down soon. For now, I'm using Element and it's going great so far.