The owner should release the source code / configuration, in whatever state it’s in, before things escalate further. It’d suck for all their work to go down the drain. I’m sure there’d be people willing to adopt the project and host instances.

If you agree and you have Tumblr, would you consider asking them anonymously?

https://blog.archive.today/ask

deleted by creator

So they could have replaced it with, like, email verification or something, but they instead stuck to the design that lets governments identify all users?

<Insert rampant and unfounded speculation about FBI compromise here>

Pretty sure you still need a phone number for an account, though - the usernames are just for sharing your contact with other people.

Most peoples’ phone numbers are easily linked to their identity. Which means the government knows who’s using Signal.

Usernames are definitely an improvement, but this is a fundamental limitation in Signal’s design.