It really just depends on which country/company you’d trust more with your data imo. Like even on the comparison site https://www.securemessagingapps.com/, there isn’t a single company with non-iffy company and infrastructure jurisdiction, and one would have to manually check the funding section since they list Signal as good on there (as they obviously haven’t checked that one of the funders has fed connections).

https://yasha.substack.com/p/signal-is-a-government-op-85e

The from 2013 through 2016 link only goes to the homepage now, but you can find Signal as a supported project here: https://www.opentech.fund/projects-we-support/supported-projects/?sc=&filter1=&filter2=&order-by-selector=date-desc&pageno=7

Signal’s got fed connections, though, iirc.