Extremely competent, saying Signal is not private by design.

While very disingenuous, it's not technically incorrect.

Signal is secure by design, and is extremely good at that with a very well designed and vetted cryptographic protocol.

But privacy isn't one of their primary goals, nor should it if it comes at the cost of security; for example, for the longest time you needed to share your phone number with everyone you wanted to talk to, and everyone in every group chat you are a part of could see it.

users [can] retain access to messages even after logging out of the platform

This sounds great. Nothing bad could happen here. I’m sure the people developing this are competent.

the article says:

Further, if users want to retain access to messages even after logging out of the platform, they must set up a recovery key, which the installation manual suggests storing in a password manager.

this is standard matrix thing. if you log out of matrix and don't do that, you're greeted with Unable to decrypt message after next login. this is because it's on-prem matrix instance (or instances) with mandatory 2fa (freeotp is an option) and registration process tying matrix identity to national id, and it's intended only for public administration internal use. you can't just walk up and register you have to work there, and as their threat model is about phishing, this does make sense