Well yes, but also because their app is proproetary. As in, it bundles proprietary dependencies, in particular for google push system and there was a proprietary dependency for audio processing, too.
More things can be said, e.g. that Molly actually "fixes" these problems... But I think it's fair to mention what I wrote above.
No auto-updates and most regular users probably don't know how to validate the hash.
Surprisingly, the standalone apk version is able to self-update and will remind you to do so.
If they put it on f-droid they'd automatically get auto updates as well.
Well yes, but also because their app is proproetary. As in, it bundles proprietary dependencies, in particular for google push system and there was a proprietary dependency for audio processing, too.
More things can be said, e.g. that Molly actually "fixes" these problems... But I think it's fair to mention what I wrote above.
Molly isn't on F-Droid either for that matter, but it seems more trustworthy than Signal, I get it off Accrescent