Signal is an approved tool, and was downloaded on his govt device.

Discussing classified information using Signal is not approved. I'm no lawyer but it probably violates the Federal Records act, as messages were set to expire on a 30 day schedule.