There would also be a lot to discuss regarding AppSec for messaging apps used as exploitation vectors, but this would be better at different place. A lot of messengers with great privacy and huge userbases have room for improvement for security enhancements, Signal being one.