content: For instance: I found it surprising that the CIA didn't even try to break Signal, since they just interjected themselves between your software keyboard and the Signal app, and grabbed the data they needed before it was even encrypted.   That's best practice since long ago for most. Listening in on communication by tapping the lines and solving decryption is a much bigger hurdle than deploying some malware and straight up getting everything in plaintext. Basically everyone outside of big agencies has been relying on this as wiretapping was outside their abilities and anti-virus is much worse than public perception.