Earlier quoted context omitted.
> distributed only in an unsigned insecure form or in a signed/verified manner only if you give up your privacy to install with Google Play or the Apple store. > Those that only run open source software like myself have no secure way to run Signal short of compiling every release by hand which is impractical. Nope: https://signal.org/android/apk/
You may be missing the subtle point - the APK provided is the same one from Google Play, which includes the Google SDK encumbered libraries (links? hooks? features?). If you run a libre device without the Google Play store (non-Google android build) then the software cannot function. The code for the client is open source, but the act of compiling it against the required Play store libraries encumbers the final binar…
I think you mean either of two things:
1. running the APK they build on a device without Google Service does not work
2. running the APK they build on a device means it's no longer running only libre software
1. is not true, so I assume you mean 2. I guess that's true, but in practice I think that the compiled dependency doesn't do anything if you don't have the services on your phone (don't quote me on that). It's not free software, but it's still better than the competition.