Users typically don't have root on Android or iOS. How do we know that Google/Android (or maybe telco) aren't obtaining plaintext before encryption? I'm not ar

Users typically don't have root on Android or iOS. How do we know that Google/Android (or maybe telco) aren't obtaining plaintext before encryption? I'm not arguing that they're doing that. Just that the risk model depends on trusting them not to do it. And if there is compelling evidence that they can't do it, I'd love some cites. Also, Signal accounts are tied to telephone numbers. And it's well known that phones by default accurately know their locations. So any app with adequate permissions knows the device's location. And location privacy depends entirely on software settings.