It doesn’t matter how private and secure the messaging app is if the OS / keyboard / some random Google slopware with notifications access / physical device is compromised. But for 99% of people, Signal, Telegram or even WhatsApp is good enough.