>All it takes is a single public scandal where Signal provably tampered with safety numbers for the whole service to be thrown into question.

How would the user prove that a particular device never existed?