Signal is often considered the gold standard in private and secure messaging. But is Signal safe? How much of its reputation is justified?