Fully cosigned. Signal is probably the best option that most people have for realistically secured sensitive communications. I have a lot of criticisms for them, but that doesn't mean there's a better option! Personally I think we all need to have a rule that if you are jumping ship on some tool, "it's insecure" is insufficiently detailed, because that is a phrase so vague as to be basically meaningless. What's the threat, what's the vulnerability, how does it fit into your threat model?