> This is more or less a way of saying it's "rather pointless to have secure messengers on iOS".

No! that is not at all what is being said. There is no way to use signal that doesn't give Google or Apple remote code execution privileges in the process.

This means that for people who aren't already exposing themselves to these companies use of signal is a step down in security.