My problem with signal is that building from source is damn near impossible because of the mess their code is and how many dependencies it requires. You’re therefore trusting whatever they provide for download.