As of january 2022, Signal appears vulnerable to man in the middle hacks and pegasus spyware. In 2019 they removed the independent password option, so if your phone pwd is hacked, or keylogger software is installed, your signal account is insecure.