i think signal has been pwnt for a long time
not even many people know that it was originally named "redphone"
i was using that back in 2013, and the hole thing swings around spam resistance based on SMS confirmation
as many people know, SMS is broken security a long time ago, so their entire business model is in the toilet since years