It’s centralized. And like all US based companies they have to conply to Patriot Act and Cloud Act, meaning US government agencies have everything not encrypted (dynamic map of all messages and social links).

Plus Signal has been founded by the CIA organisms (indirectly), it’s really shady