Yes, the scandal here is not just the questionable security. It is also clear intent to circumvent transparency laws which suggests they may be intending to hide the breaking of other laws.
Using signal with auto deletion is illegal. Creating a fork of Signal for CIA (or whichever) use and then deliberately not removing auto-deletion is really illegal. I think that's the thought process, at least.