2/2
In the meantime, you can run the following commands on macOS to verify that Signal is properly signed and notarized:
% spctl --assess -vv /Applications/Signal.app
/Applications/Signal.app: accepted
source=Notarized Developer ID
origin=Developer ID Application: Quiet Riddle Ventures LLC (U68MSDN6DR)
% codesign --verify --verbose /Applications/Signal.app
/Applications/Signal.app: valid on disk
/Applications/Signal.app: satisfies its Designated Requirement
@Mer__edith @briankrebs @apicultor @x_cli Patrick Wardle wrote a small macOS extension to add UI for this https://objective-see.org/products/whatsyoursign.html