This is a protocol audit. The app itself has not been audited yet, but they supposedly plan to do it.

The point is that, if Signal goes bad/evil, someone can just take the code and self host it. I don’t need a federated service. I want a messenger that has powerful end to end encryption with forward secrecy, post-compromise recovery, deniability, and post quantum encryption. Other social media, like Mastodon and Lemmy, don’t have encryption because everything is public anyway, and I value decentralization more about them to avoid political interference and censorship (which are irrelevant on Signal).

You can self host Signal. https://github.com/signalapp/Signal-Server

Is country what decides the services you use? That’s pretty shallow

Signal for me

Or GNOME Papers https://gitlab.gnome.org/GNOME/Incubator/papers (still beta)

The only apps that don’t work on GrapheneOS are apps that use the strong play integrity API. These don’t work on LineageOS either, only stock OS.