@signalapp implementing authentication using more secure methods (passkeys, physical security keys) could eliminate that risk.