Kind of. But it is a really good point and I'll try to explain: As long as both parties use a known safe version of e.g. Signal everything is kind-of good. Me

Kind of. But it is a really good point and I'll try to explain: As long as both parties use a known safe version of e.g. Signal everything is kind-of good. Messages may pass through NSAs and GRUs headquarters and they are none the wiser even if they have access to Signals servers. However, if any of them somehow manage to strongarm a release of Signal through the release channels and you or whoever you talk to updates or auto-updates Signal and that new release somehow uploads data from the Signal client, then for most of us we would be none the wiser.