If the underlying layers are completely hosed, how reliable or safe can these apps really be? Even assuming full blown TLS and SSL, I'm still not convinced these apps are that good. For example, Signal doesnt allow you to set a conversation password or cert, which makes me think it's nothing more than giving false hope to idiots