Does it matter? It's a SaaS anyways, so if they wanted to go rogue and use it to eavesdrop on your chats open source wouldn't really prevent that. They even specifically recommend using a dedicated group chat for notification purposes. For self-hosted deployments there's already a multitude of projects that expose an API to send signal messages.