is it really open source when you have to use the binary builds from signal through the app stores? it could be like the xz attack: clean source, bad binaries.