> Neither Debian nor Signal audit 3rd party applications in the way that Apple does How do you mean? Almost everything Debian packages is authored by third par

> Neither Debian nor Signal audit 3rd party applications in the way that Apple does How do you mean? Almost everything Debian packages is authored by third parties. Debian aren't to my knowledge the original authors of LibreOffice or GIMP or Firefox. And they certainly don't just sign anything without looking at it. They do also sign some packages they have authored themselves, as does Signal, as does Apple.