No software system is able to remove the security problems of a bad user. I set my signal up to only show the name of who has sent me a message in the notification, not the content.

Rather defeats the whole purpose to pass the message onto the OS IMO.