You can lock your signal account with a password/code so that can’t happen

not currently, they do seem to be actively working on adding usernames but who knows how long that will take