No messaging app on a phone can be more secure than the phone itself, so why bother with Signal?
This is why threat modelling is so important: there are absolutely a *lot* of threats that Signal protects you against, even on a phone that leaks too much data to Apple and Google.
It is both true that Signal is very worth it, *and* that to get the most out of it across the most threat models, your phone itself should be as secured as you reasonably can get it.