Of course, you could always use a trustworthy service that downloads and builds the source directly from Github and signs it with its own key - like F-Droid...
...if Moxie allowed it. Instead you're just supposed to trust him.
I much prefer SilenceIM anyway, which uses the same encryption but tunnels it over SMS. Like Signal used to, before that feature was inexplicably dropped in favor of becoming another internet instant-messenger. Which requires giving root on your phone (!) to the largest ad company in the world (!) to use properly.
...if Moxie allowed it. Instead you're just supposed to trust him.
I much prefer SilenceIM anyway, which uses the same encryption but tunnels it over SMS. Like Signal used to, before that feature was inexplicably dropped in favor of becoming another internet instant-messenger. Which requires giving root on your phone (!) to the largest ad company in the world (!) to use properly.