Sources: Signal's rapid growth following WhatsApp privacy changes has raised concerns from Signal staff who worry the service's new features will be misused
The friction was visible before this week: last July, security experts threatened to abandon Signal over its feature storing certain data on Signal's servers for recovery purposes — an early sign that convenience features cut against the threat model of its most sensitive users. Now, with growth accelerating, the concern has moved inside the building: Signal's own staff reportedly fear the new features will be misused.
First-order effects
Signal's staff are now an internal check on the product roadmap, pressuring leadership to weigh each mainstream feature against misuse by the very at-risk users — protesters, dissidents, journalists — the app gained during the BLM-era surge.
The wave of WhatsApp refugees arriving after the January privacy-policy backlash expands Signal's user base far beyond its high-assurance core, changing who the new features actually serve.
Second-order effects
Security experts who already threatened to quit over the server-side recovery feature have fresh grounds to re-litigate Signal's trade-offs publicly, giving Telegram — riding the same exodus — an opening to court the purist segment.
WhatsApp's clarification-and-retention play puts both apps in a race where each new feature becomes a privacy talking point for the other side's marketing.
Third-order effects
If the pattern holds, encrypted messaging bifurcates: mainstream apps accumulate convenience features and larger attack surfaces, while a smaller high-assurance tier serves users whose safety depends on minimal functionality — making 'privacy' a spectrum rather than a checkbox.
Internal dissent becoming public at a mission-driven nonprofit signals that trust, not technology, is the binding constraint on how fast privacy-first platforms can scale.
The trend: Privacy-positioned messaging apps are discovering that the feature velocity needed to absorb mainstream exoduses directly tests the trust that attracted their most vulnerable users.
Ever since Signal simultaneously hit #1 on the 🇮🇷 Play Store and #1 on the 🇮🇷 government's block list, we've been working around 🇮🇷 censorship. Unable to stop registration, the IR censors are now dropping all Signal traffic. Iranian people deserve privacy. We haven't given up.
🧵 Today's issue of @platformer is a look at the battle inside Signal. The company is developing features that would make it vulnerable to abuse — and employees are sounding the alarm https://www.platformer.news/ ...
What's so fascinating about is that it's only indirectly a content moderation battle, since the platform is built to make content moderation impossible. It's about design. https://twitter.com/...
Signal employees have been sounding the alarm internally about new features they fear will allow the messaging app to be used in dangerous and harmful ways. At least one employee quit over similar concerns in recent weeks: https://twitter.com/...
One day after Iranian government blocked @SignalApp traffic in the country. @WhatsApp again became the first popular app in the country among messenger/social media apps. https://twitter.com/... https://twitter.com/...
Really important rundown on Signal from @CaseyNewton. Its poor design choices, on top of end-to-end encryption, risk user safety, could drive child abuse, and is a salutary lesson on the importance of organisational culture to drive safer user outcomes https://twitter.com/...
The CEO's response “was rooted in the idea that because Signal employees cannot see the content on their network, the app does not need a robust content policy.” But the content moderation backlash will come for every successful platform in the end https://twitter.com/...
“Employees worry that, should Signal fail to build policies and enforcement mechanisms to identify and remove bad actors, the fallout could bring more negative attention to encryption technologies from regulators” — @CaseyNewton https://www.theverge.com/...
“Signal's story illustrates how simply changing an organization's business model does not eliminate the potential for platform abuse. Wherever there are incentives to grow, and grow quickly, dangers will accumulate, no matter who is paying the engineers' salaries.” #ad #algorithm…