> A cryptosystem is incoherent if its implementation is distributed by the same entity which it purports to secure against.

That's what the recent Signal tormoil is like.

Communication via Signal app that's safe if you could be sure it was compiled from verified open-source code, but Signal still doesn't provide any way to in principle eliminate the possibility that client binary distributers put in a backdoor at the last minute.