I thought the same as you about gif search until I saw what signal is planning for the feature: https://whispersystems.org/blog/giphy-experiment/

By proxying the encrypted request through another server, signal never sees the content of the request and giphy never gets the identity of the requester. I'm not sure that this is strictly necessary, but it certainly increases my confidence that the signal team are serious about their work.