Did you even read it? There's no IP leak. And if you're a high target, then using some kind of proxy is literally the first step you take. The attack is nothing but an exaggeration and has no merit in real world
And I strongly disagree that being able to uncover somebody's rough geographic location is not a privacy problem.
I wouldn't be surprised if this, for example, lets you deduce if somebody is currently home, at work, or commuting (as all three ISPs might be hitting different Cloudflare datacenters). That's not information everybody is comfortable broadcasting to the world.
> Privacy isn’t an optional mode — it’s just the way that Signal works. Every message, every call, every time [1]
While I don't consider this a critical bug requiring an immediate technical remediation from Signal, this should definitely be either fixed or called out in the documentation at some point.
[1] https://support.signal.org/hc/en-us/articles/360007320391-Is...
> Signal conversations are always end-to-end encrypted, which means that they can only be read or heard by your intended recipients.
They're not saying that it is an anonymisation proxy, they're saying the messages and calls are encrypted for the recipient rather than to the server