Are you saying Signal uses bad encryption? I genuinely am not sure if this is sarcasm or genuine.

But where do you draw the line between catching these people and not invading the privacy of every single user of the software? Because so far no one has found a solution despite a decade or more of attempts.