@leavex whilst technically correct, I'd argue that there is a burden of care required by Signal or any other app. Why is pin verification required? Is a PIN an appropriate validation method? How is it that users could think that the phishing method be easily mistaken for a genuine request?I've been a Signal user for some years, and I'm pretty digitally literature. It's not clear how PIN verification helps security, or why it is required when it's required.
