Signal downplays encryption key flaw, fixes it after X drama

I really don't understand why so many people like Signal. It's an utter piece of shit in terms of UX, has questionable security practices, harvests phone numbers, and it's located on a central server in US.