Signal's code is open-source but do we have a way to verify that the server's code used in production is exactly the same as the open-sourced one? Without any added backdoors or changes.

Also a centralized social service is an issue by design. Because at some point the government(s) might censor the service or impose changes.

I will stick to decentralized alternatives like simpleX or nostr.