Secure within the context of a certain threat model.

The French government does not endorse signal for government communication as an example

And I would highly suspect the Russian government would not use signal either.

I cite both of these as examples of threat models that can’t ignore some of the potential capability of the signal.