> so it is exfiltrating your contact list as well, exposing your network.

They claim they do that in a privacy-preserving way with crypto magic but it's the inform-people-when-you-start-using-signal part that is a problem