Signal’s primary defense against that is disappearing messages. Beyond that, what can you really do against what is essentially an untrusted endpoint? Education and awareness, and hope that it sticks.