Signal is AGPL licensed, so they would have to publish whatever crude hack they insert in order to install that back door. (not the keys, of course, but if they're this incompetent about tech legislation, I don't trust their QA competence to be top notch)