It's a good sign if social engineering is the easiest way to break encrypted messaging. See Signal updates to minimize risk from illicit QR codes - https://www.wired.com/story/russia-signal-qr-code-phishing-attack/
WIRED · A Signal Update Fends Off a Phishing Technique Used in Russian Espionage