> Ineffective, or using side-channels

Yeah, I worry more about the device running Signal.

Is it up to date? | Any other apps with flaws?

And then any time the browser is used there's risk, especially since mobile devices are worse about supporting ad blocking - that's one reason I like Algo - block malicious stuff at the DNS level rather than worry your combination of privacy extensions is giving you security but also making you more fingerprintable (reducing privacy).

BUT I like Signal as a way to reduce ambiguity. (Eg: If I text you on Signal, it's unlikely someone snarfed that out of the air, and over time I can see where information is leaking, same goes for a voice chat)

Then it's down to trust, which is sadly an unsolved problem. (At least for this poster)