[wglb]

>There is just one, situated in one country, and it happens to be a country whose government intelligence agencies have a long and colourful history of infiltrating and compromising organisations just like Signal.

Whereas that same agency is under fewer restrictions for targets hosted in other countries.

>the reality is it that security is very weak because they don't want to go to all that tedious setup the PGP / X509 ecosystems wants them to do.

Being tedious doesn't automatically improve security. See https://latacora.micro.blog/2019/07/16/the-pgp-problem.html and https://blog.cryptographyengineering.com/2014/08/13/whats-ma... and https://gist.github.com/rjhansen/67ab921ffb4084c865b3618d695...: see the section on why broken stuff there won't be fixed.