Signal takes steps to reduce the amount of metadata visible, like sealed sender which makes it so that Signal doesn’t know who sent a message. Even your payment information for donations is separated from your identity so that they know you are a donor, but not how you donated.
It desn’t matter if Signal were hosted on Putin’s personal servers. Its security is in its protocol, it’s not trust based.
That’s crappy, but have you seen what other remote apps are doing?
Vizio has an ad that takes up around 25% of the screen!
MyQ has a large scrolling ad at the top, and they are actively hostile towards any integration that allows you to control your garage door without using their app (unless you use one of the very few subscription-based integrations they offer, of course).