> Those that only run open source software like myself have no secure way to run Signal short of compiling every release by hand which is impractical.

Particularly because the software is timebombed and stops working after a while (and also blocked on the server side if you bypass the client side timebomb).