… or why it’s useless to have the most secure crypto system in the world, when using non-free and untrustworthy tools and libraries to implement it.

tl;dr: There is a “backdoor” in Signal nobody cares about, only Google can use it.

~ larma/blog