This quote hits the nail on the head about #signal.
"Signal is finally tightening its desktop client's security by changing how it stores plain text encryption keys for the data store after downplaying the issue since 2018."
via https://infosec.exchange/@BleepingComputer/112769833568987287