> Not like it's going to be hard to brute force a user's PIN.

I guess it depends on if you buy into SGX. Lots of people don't.

> Still stupid

Yeah, this isn't making anyone happy it seems. Still, they are a small organization and having configuration increases maintenance burden. As long as Signal keeps operating as non-commercial product, I will keep cutting them slack.