One of the annoying features of the (broader) security community is how easy it is to go from “healthy paranoid” to “stupid paranoid”.
Healthy paranoid assumes that there are bad people trying to attack your systems, and you need your systems to be robust against those people. Stupid paranoid assumes that everyone is part of a conspiracy to get you.
This article on Signal that’s currently gracing HN is an example of the stupid variety. It makes some valid points about operating systems and federation, then immediately assumes mal-intent and untrustworthiness. 
In fairness, I think the crypto community has actually been somewhat *over* trusting, in the sense that we’ve seen some real examples of deliberate sabotage of products. But the answer is to bring evidence, not make baseless accusations.
Also, I just want to say: if I were the US (or a foreign) intelligence agency looking to poison the well, I wouldn’t start with known crypto developers. I’d release backdoored crypto software anonymously on the Internet.
