I'd argue that if you're currently the target of a government you should take the time to verify the cryptographic signatures at least every so often. Any platf

I'd argue that if you're currently the target of a government you should take the time to verify the cryptographic signatures at least every so often. Any platform you use they could have gotten to the servers or the owners of the servers. Hell, they could patch the servers in memory so there's never any trace in source code.