The Signal Foundation is based in Mountain View and both Moxie Marlinspike and Brian Acton are US nationals...
What’s stopping some US government agency from forcing them to insert code that causes the Signal app to a indicate it is behaving correctly but isn’t?
And don’t say “laws”.
If your threat model includes advanced persistent threats all bets are off.