[brookst]

As Dev_VR said, that is a recommendation from CISA to private sector users, not an approval for DOD users.

[fiddlerwoaroof]

That’s only partially true: I know for a fact that people in government agencies were given permission to use Signal during the Salt Typhoon attacks. You might not be able to use Signal for certain DOD purposes, but non-DOD agencies do permit Signal.