Signal downplays encryption key flaw, fixes it after X drama

Signal Desktop historically stored the local message-store encryption key in plaintext (config.json), undermining at-rest protection if an attacker or malicious process has local or same-user access; this issue resurfaced on social media and researchers prompted Signal to adopt Electron's safeStorage (using platform keystores) as a mitigation, though platform limits (e.g., DPAPI only protecting cross-user access) mean same-user malware can still access the data until stronger user-supplied protections are implemented.