Signal is just as insecure because they can push any code they want to anyone they want to spy on.
What now? That's not "just as insecure", since Telegram can also "push any code they want to anyone they want to spy on," but they don't need to because your data is already plaintext on their servers.
Signal not being perfectly secure does not make it "just as insecure."