So am I. Nadim is a cryptographer who audits stuff professionally. If there's a vulnerability, the client side (which is open source) would have to show it, which is why E2E encryption is a must for the tools I use.

I'm all for decentralization in everything, but as one who attempted to get friends to use PGP back in the 90's (I failed), I know what that has to look like. Signal is the best option for now.