Of course there is. That's why one of the cleverest parts of signal is the engineering to invalidate number 2. Moxie and signal are the world leaders in trying to make it impossible for the service to know who you communicate with... Even to the point of using the Intel secure enclave to audit the server software and validate that it doesn't peek.