I think it's worth pointing out that even when you install Signal from Apple's App Store, for example, you are trusting that that binary actually corresponds to the open-source code-base in Signal's repository. That is to say, if you can't independently verify what an app store is giving you, then you are inherently trusting that app store with ANY app it is giving you.
But yeah, in addition to WhatsApp not being open-source, it should already be well known not to trust WhatsApp (i.e. Meta) by reputation alone.
Judge Hardcase
npub1k7…x7ehv
2026-01-28 11:45:16 UTC
in reply to nevent1q…eqwp
Author Public Key
npub1k7v6uflqxu9js45e8ek53u2azefe6j49r7lna0da90zq7c9y6f0q8x7ehvSeen on
wss://nos.lolPublished at
2026-01-28 11:45:16 UTCEvent JSON
{
"id": "1953f7b6ede749c2aa6a6d23aae0870f32b14f4e28377c2bebe6da176afde93b",
"pubkey": "b799ae27e0370b2856993e6d48f15d16539d4aa51fbf3ebdbd2bc40f60a4d25e",
"created_at": 1769600716,
"kind": 1,
"tags": [
[
"e",
"7c0ba34107673125303e67a4c5c8ffd6cb52a8ef4dafdd8fc1e591d00a2b28c5",
"wss://nos.lol/",
"root",
"5cad82c898ee66013711945d687f7d9549f645a0118467dae2f5e274c598d6ff"
],
[
"p",
"5e70f2977a61214de215585a409f9592e65bd1b8177190700ae61937b1014737"
],
[
"p",
"5cad82c898ee66013711945d687f7d9549f645a0118467dae2f5e274c598d6ff"
]
],
"content": "I think it's worth pointing out that even when you install Signal from Apple's App Store, for example, you are trusting that that binary actually corresponds to the open-source code-base in Signal's repository. That is to say, if you can't independently verify what an app store is giving you, then you are inherently trusting that app store with ANY app it is giving you.\n\nBut yeah, in addition to WhatsApp not being open-source, it should already be well known not to trust WhatsApp (i.e. Meta) by reputation alone.",
"sig": "e13ad840cc84d9e47de411c998e9badb520bb1e7b23e163b84287a612c3f918c60de5102402404036f48ca880297e250b118567e0a4f9e2f86ac2d4b373b3be6"
}