• If they could surveil the device to see the PIN being entered then no app would protect them.

    My Signal only asks for a PIN about once per month so that would be a lot of screen surveillance hours to sit through in order to catch that moment.

    More likely is that it was fixed since the breach but I cannot find release notes (hard to search on my phone).