> To be effective Signal would need to exploit the major vendors equally.

I bet they could. Any industry that's shrouded in secrecy tend not to have the sort of incentives that would ensure better security practices.