The bit on the metadata was incorrect. While Signal doesn't protect metadata like a more anonymous messenger (a la Session, SimpleX), it DOES protect metadata. Most of it is encrypted (profile pics, for example) and Sealed Sender requires any MITM to be simultaneously observing both the sender and the recipient in order to know whom you're chatting with.