@inthehands I'd assume the same of Signal, to be honest. You're not safe and secure against a nation-state actor, especially not running software from that country communicating through servers run in that country.
The question is if you're worth them exposing that operation (you're probably not).