Even though #Signal *itself* has sound security - taken in isolation - it's always moored in an ecosystem (that of smartphones which run #iOS or #Android) which, by default, have #AI set up to shoulder-surf Signal, sending reports back to the mothership. In #iOS, that AI is called "#Apple Intelligence", and in #Android, it's called #Google Assistant. Repeat, these are on by default. *Only a small percentage of your family, friends, colleagues, and fellow country-persons will pain-stakingly disable these.*
Sure, Signal itself is secure by default, but "a chain is only as strong as its weakest link". And the weakest link is the ecosystem which Signal is moored in - that of smartphones policed and patrolled by AI, which report back to their respective motherships *in a strong majority of cases*.
Alternatives like #Deltachat (for normies willing to open their wallets/purses to rent an auto-crypt-compatible email address) and #XMPP (easily free to use, however realistic and mature only for non-iOS/#MacOS-users at present) have comparable E2E encryption. Deltachat and XMPP *don't* require smart-phone "moorings" - thereby making it much more realistic to dodge the almost-pervasively AI-patrolled ecosystems.
#infosec