The app itself and its protocol are very secure. It’s no wonder WhatsApp chose to implement it instead of baking their own. The issue here is that Signal is not designed to be used for top secret stuff, where adversaries with practically unlimited resources will specifically target your device. There’s no auditing features, there’s no safeguard if you add a group member by mistake, …