This is a protocol audit. The app itself has not been audited yet, but they supposedly plan to do it.

The point is that, if Signal goes bad/evil, someone can just take the code and self host it. I don’t need a federated service. I want a messenger that has powerful end to end encryption with forward secrecy, post-compromise recovery, deniability, and post quantum encryption. Other social media, like Mastodon and Lemmy, don’t have encryption because everything is public anyway, and I value decentralization more about them to avoid political interference and censorship (which are irrelevant on Signal).

You can self host Signal. https://github.com/signalapp/Signal-Server

Is country what decides the services you use? That’s pretty shallow

Signal for me

The only apps that don’t work on GrapheneOS are apps that use the strong play integrity API. These don’t work on LineageOS either, only stock OS.