Also, encrypting files on disk is not actually protecting anything. The Signal app still has to decrypt is somehow, and has to store the private key somewhere,

Also, encrypting files on disk is not actually protecting anything. The Signal app still has to decrypt is somehow, and has to store the private key somewhere, usually on disk, unencrypted..