There's a species of fediverse denizen that loves to shit on Signal, probably the most heavily-audited privacy software around, with spurious and vague accusations. It is usually followed up with a recommendation for something with no audit, structural vulnerabilities, terrible UI, and infrequent updates that is mostly used by neo nazis (see, for example, Session or SimpleX). Best to ignore them. Signal is a non-profit and largely insulated from concerns of enshittification. There's room for critique, of course, but the tinfoil conspiracies are kind of ridiculous.